CVE-1999-1231

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-12337.5IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS CVE-1999-12345.0LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomCVE-1999-12354.6Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the inCVE-1999-12364.6Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privilegesCVE-1999-123710.0Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remCVE-1999-124110.0Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page thatCVE-1999-12447.2IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.CVE-1999-12455.0vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackersCVE-1999-12467.5Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which CVE-1999-12477.2Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.CVE-1999-12545.0Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causeCVE-1999-12555.0Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action p