Unrated severityNVD Advisory· Published Oct 25, 2013· Updated Jun 16, 2026
CVE-2013-4434
CVE-2013-4434
Description
Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*Range: <2013.59
- Range: <2013.59
Patches
Vulnerability mechanics
References
8- secure.ucc.asn.au/hg/dropbear/rev/d7784616409anvdPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-10/msg00061.htmlnvdThird Party Advisory
- lists.opensuse.org/opensuse-updates/2013-11/msg00046.htmlnvdThird Party Advisory
- secunia.com/advisories/55173nvdVendor Advisory
- www.openwall.com/lists/oss-security/2013/10/16/11nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/62993nvdThird Party AdvisoryVDB Entry
- matt.ucc.asn.au/dropbear/CHANGESnvdVendor Advisory
- support.citrix.com/article/CTX216642nvdThird Party Advisory
News mentions
0No linked articles in our index yet.