From a6edd94c7f3c0c22adcb90e7a5e3bd7b0743d3ac Mon Sep 17 00:00:00 2001 From: Tod Beardsley Date: Mon, 28 Apr 2014 19:47:15 +0100 Subject: [PATCH] Just fix refs and desc for release --- modules/auxiliary/scanner/ssh/ssh_enumusers.rb | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/modules/auxiliary/scanner/ssh/ssh_enumusers.rb b/modules/auxiliary/scanner/ssh/ssh_enumusers.rb index 834494d700..d919b82f1a 100644 --- a/modules/auxiliary/scanner/ssh/ssh_enumusers.rb +++ b/modules/auxiliary/scanner/ssh/ssh_enumusers.rb @@ -17,12 +17,16 @@ class Metasploit3 < Msf::Auxiliary 'Name' => 'SSH Username Enumeration', 'Description' => %q{ This module uses a time-based attack to enumerate users in a OpenSSH server. - }, - 'Author' => ['kenkeiras'], - 'References' => - [ - ['CVE', '2006-5229'] - ], + On some versions of OpenSSH under some configurations, OpenSSH will prompt + for a password for an invalid user faster than for a valid user. + }, + 'Author' => ['kenkeiras'], + 'References' => + [ + ['CVE', '2006-5229'], + ['OSVDB', '32721'], + ['BID', '20418'] + ], 'License' => MSF_LICENSE ))