CVE-2003-1562

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root…

published August 4, 2008

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05573 · 92.8th percentile
Published
2008-08-04T10:00Z
EPSS history
Timeline
  • 04 AUG 10:00Z
    sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root…
    cvelistv5