critical10.0Public exploit code
CVE-2007-2791
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Tru64 - Remote Secure Shell User Enumeration2007-06-04 · remote · tru64 · Verified
Impact
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to timing attacks and AuthInteractiveFailureRandomTimeout.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Tru64 | Versions 5.1b3, 5.1b4 |
References
- NVD record
- CVE.org record
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01007552
- http://osvdb.org/36204
- http://secunia.com/advisories/24036
- http://www.securityfocus.com/bid/24021
- http://www.securitytracker.com/id?1018065
- http://www.vupen.com/english/advisories/2007/1851
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34329
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01007552
- http://osvdb.org/36204
- http://secunia.com/advisories/24036
- http://www.securityfocus.com/bid/24021
- http://www.securitytracker.com/id?1018065
- http://www.vupen.com/english/advisories/2007/1851
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34329