OSVDB ID: 29266 Title: OpenSSH GSSAPI Authentication Abort Username Enumeration |
Info |
|
|
Dates |
||||
|
|
Description |
OpenSSH, when configured to use GSSAPI authentication, is prone to a remote information disclosure weakness. The issue occurs due to the GSSAPI authentication routine responding differently to an attacker who lets the connection proceed normally versus aborting the connection prematurely. This different in the system's response allows an attacker to determine which accounts are valid. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure, Race Condition Impact: Loss of Confidentiality Exploit: Exploit Unknown Disclosure: OSVDB Verified |
Solution |
Upgrade to version 4.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |