OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-05-21T20:00:00
Updated: 2024-08-07T13:49:57.388Z
Reserved: 2007-05-21T00:00:00
Link: CVE-2007-2768
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-05-21T20:30:00.000
Modified: 2024-11-21T00:31:36.827
Link: CVE-2007-2768
Redhat
No data.