CVE-2004-0243

{"id": "CVE-2004-0243", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-11-23T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=107583269206044&w=2", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15172", "tags": ["VDB Entry", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=107583269206044&w=2", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15172", "tags": ["VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods."}, {"lang": "es", "value": "Cuando est\u00e1 deshabilitado el login remoto en AiX4.3.3 hasta AIX5.1 muestra un mensaje diferencte si la contrase\u00f1a es correcta, lo que permite que atacantes remotos adivinen la contrase\u00f1a por m\u00e9todos de fuerza bruta."}], "lastModified": "2024-11-20T23:48:05.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}, {"criteria": "cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6FCB46F-45F5-4B7D-805E-588DE9F441D5", "versionEndIncluding": "5.1", "versionStartIncluding": "4.3.3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}