CVE-2009-1273: pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different er...

Security readout for executives and security teams

This issue can let a remote attacker tell whether a username exists by observing different authentication error messages from pam_ssh. It does not directly grant access, but it can help attackers focus password guessing, phishing, or account-targeting activity. Exposure is likely limited to systems using pam_ssh in PAM authentication with the USE=ssh build condition described in the CVE. The bundle does not identify broader affected products or exact fixed versions. Address during normal vulnerability remediation, faster on internet-facing authentication systems. The main business risk is enabling more targeted credential attacks, not direct system takeover. Mitigation focus: Inventory systems using pam_ssh in PAM authentication paths.; Check Gentoo, Fedora, or vendor advisories for corrected pam_ssh packages.; Update pam_ssh where a vendor-supported fix is available..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.