Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-0243 | First vendor Publication | 2004-11-23 |
| Vendor | Cve | Last vendor Modification | 2024-02-14 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0243 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-203 | Information Exposure Through Discrepancy |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 6929 | IBM AIX Remote Login Disable Password Verification Disclosure IBM AIX contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker attempts to login to an account which has remote login disabled. If the userid and password combination is correct the operating system will respond with a text saying that remote logins are disabled. The attacker can thus brute-force or verify a password resulting in a loss of confidentiality. |
Sources (Detail)
| Source | Url |
|---|---|
| BUGTRAQ | http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html http://marc.info/?l=bugtraq&m=107583269206044&w=2 |
| XF | https://exchange.xforce.ibmcloud.com/vulnerabilities/15172 |
Alert History
| Date | Informations |
|---|---|
| 2024-02-14 17:28:18 |
|
| 2021-05-04 12:02:18 |
|
| 2021-04-22 01:02:27 |
|
| 2020-05-23 00:15:45 |
|
| 2017-07-11 12:01:25 |
|
| 2016-10-18 12:01:18 |
|
| 2013-05-11 11:40:36 |
|
