CVE-1999-1231
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password on…
Published: 2001-09-12 · CVSS: Unscored
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7