CVE-1999-1231 — MEDIUM (5.0)

Vulnerability Description

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Ssh	Ssh2	2.0

References

http://www.securityfocus.com/archive/1/14758ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2276
http://www.securityfocus.com/archive/1/14758ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2276

FAQ

What is CVE-1999-1231?

CVE-1999-1231 is a vulnerability with a CVSS score of 5.0 (MEDIUM). ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote...

How severe is CVE-1999-1231?

CVE-1999-1231 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-1999-1231?

Check the references section above for vendor advisories and patch information. Affected products include: Ssh Ssh2.