CVE-2001-1483

One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-12-31

Last modified

2024-08-08

Weaknesses

CWE-203

Affected products

• One-time Passwords In Everything (Nrl.navy)

References

• http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
• http://www.securityfocus.com/bid/3549
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7572