Bugtraq mailing list archives

OpenSSH/PAM timing attack allows remote users identification

From: Marco Ivaldi <raptor () mediaservice net>
Date: Wed, 30 Apr 2003 16:34:27 +0200 (CEST)

Hi all,

See attached advisory.

--
Marco Ivaldi
Chief Security Officer    Data Security Division
@ Mediaservice.net Srl    http://mediaservice.net/

Attachment: 2003-01-openssh.txt
Description:

OpenSSH/PAM timing attack allows remote users identification Marco Ivaldi (Apr 30)