Vulnerability Development mailing list archives

Re: SSH 2.4.0/3.0.1 usernames guessable ?


From: Samu <samu () linuxasylum net>
Date: Mon, 3 Sep 2001 18:50:09 +0200

On Mon, Sep 03, 2001 at 04:09:35PM +0200, Marco van Berkum wrote:
Hi,

it was an old trick posted to bugtraq some time ago for openssh 
( i can't give you link 'cause search function today is not working )

anyway it can be avoided by setting ( on openssh conf )

NumberOfPasswordPrompts  1

don't know  for commercial version

regards
Samuele 




-- 
Samuele Tonon  <samu () linuxasylum net>
Undergraduate Student  of  Computer Science at  University of Bologna, Italy    
System administrator at Computer Science Lab's, University of Bologna, Italy  
Founder & Member of A.A.H.T.
UIN 3155609 
                Acid -- better living through chemistry.
                               Timothy Leary


Current thread: