Description
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
References
- ssh2-bruteforce(2193) vdb-entry
- 19990513 - J.J.F. / Hackers Team warns for SSHD 2.x brute force password hacking mailing-list
- 277 vdb-entry