Unscored CVE-2004-0243 EUVD-2004-0243GHSA-f7hc-7g36-w53c

AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remo…

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.

References

20040206 AIX password enumeration possible mailing-list
20040203 Re: sqwebmail web login mailing-list
aix-password-enumeration(15172) vdb-entry