CVE-1999-1231

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name…

published September 12, 2001

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01464 · 73.4th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name…
    cvelistv5