Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH 竞争条件问题漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是加拿大OpenBSD计划组的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 3.6.1p2及之前版本的sshd中存在竞争条件问题漏洞，该漏洞源于程序禁用PermitRootLogin并使用PAM keyboard-interactive身份验证时，使用正确的密码进行root登录后没有插入延迟。远程攻击者可利用该漏洞使用时间差异确定mult
CVSS Information
N/A
Vulnerability Type
N/A