medium4.3
CVE-2007-2768
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which display…
Impact
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | All versions |
| Netapp | Hci Management Node | All versions |
| Netapp | Solidfire | All versions |
| Netapp | Steelstore Cloud Integrated Storage | All versions |
| Netapp | Hci Storage Node | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html
- http://www.osvdb.org/34601
- https://security.netapp.com/advisory/ntap-20191107-0002/
- http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html
- http://www.osvdb.org/34601
- https://security.netapp.com/advisory/ntap-20191107-0002/