Unrated severityNVD Advisory· Published Jun 9, 1999· Updated Apr 16, 2026
CVE-1999-1231
CVE-1999-1231
Description
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
Affected products
13cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/archive/1/14758nvdExploitPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/2276nvd
News mentions
0No linked articles in our index yet.