[29964] in bugtraq
OpenSSH/PAM timing attack allows remote users identification
daemon@ATHENA.MIT.EDU (Marco Ivaldi)
Wed Apr 30 14:23:20 2003
Date: Wed, 30 Apr 2003 16:34:27 +0200 (CEST)
From: Marco Ivaldi <raptor@mediaservice.net>
To: <bugtraq@securityfocus.com>
Message-ID: <Pine.LNX.4.30L2.0304301358220.9889-200000@dns.mediaservice.net>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-19594736-1636472001-1051704626=:9889"
Content-ID: <Pine.LNX.4.30L2.0304301631050.14523@dns.mediaservice.net>
---19594736-1636472001-1051704626=:9889
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.LNX.4.30L2.0304301631051.14523@dns.mediaservice.net>
Hi all,
See attached advisory.
--
Marco Ivaldi
Chief Security Officer Data Security Division
@ Mediaservice.net Srl http://mediaservice.net/
---19594736-1636472001-1051704626=:9889
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME="2003-01-openssh.txt"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.30L2.0304301410260.9889@dns.mediaservice.net>
Content-Description:
Content-Disposition: ATTACHMENT; FILENAME="2003-01-openssh.txt"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---19594736-1636472001-1051704626=:9889--
