CVE-2004-0243

AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.

🔗 References (6)

• cve@mitrehttp://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html
• cve@mitrehttp://marc.info/?l=bugtraq&m=107583269206044&w=2
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/15172
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html
• af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=107583269206044&w=2
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/15172