CWE-203

Observable Discrepancy

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

735 vulnerabilities with CWE-203
CVE-2003-0190
OpenSSH < 3.6.1 - Username Enumeration via PAM Timing Attack
CVE-2003-0078
OpenSSL < 0.9.7a and 0.9.6 < 0.9.6i - Timing Side-Channel Attack via Incorrect Block Cipher Padding
CVE-2002-2094
hellbent 01 - Information Disclosure via Path Traversal Error Response
CVE-2002-0514
OpenBSD 3.0 - Observable Discrepancy via PF Return-RST Rule TTL
CVE-2002-0515
IPFilter < 3.4.25 - Filtered Port Detection via TTL Discrepancy
CVE-2002-0208
PGP Security PGPfire 7.1 - Information Disclosure via ICMP Error Message Handling
CVE-2001-1483
One-Time Passwords In Everything 2.32 and 2.4 - User Enumeration via Passphrase Response Discrepancy
CVE-2001-1528
AmTote International - Info Disclosure
CVE-2001-1387
iptables < 1.2.4 - Observable Discrepancy via iptables-save Rule Mismatch
CVE-2000-1117
Lotus Notes Client R5 - Info Disclosure
Details
Vulnerabilities 735
Links
MITRE CWE Entry Search this CWE With Exploits