CVE

Id
11186  
CVE No.
CVE-2004-2760  
Status
Candidate  
Description
sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190. NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability.  
Phase
Assigned (20080803)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78927 11186 CVE-2004-2760 BUGTRAQ:20040412 BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE)  View
78928 11186 CVE-2004-2760 URL:http://archive.cert.uni-stuttgart.de/bugtraq/2004/04/msg00162.html  View
78929 11186 CVE-2004-2760 BUGTRAQ:20040413 Re: Fwd: [BID 7482, bug in OpenSSH (Still in FreeBSD-STABLE)]  View
78930 11186 CVE-2004-2760 URL:http://www.securityfocus.com/archive/1/360198  View
78931 11186 CVE-2004-2760 SREASON:4100  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39995 JVNDB-2009-001001 MD5 アルゴリズムへの攻撃を用いた X.509 証明書の偽造 MD5 アルゴリズムの衝突耐性の不備を利用した攻撃法により、X.509 証明書の偽造に成功したことが報告されました。 CVE-2004-2761 11186 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001001.html  View