Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH OPIE信息泄露漏洞
Vulnerability Description
当为PAM使用OPIE(One-Time Passwords in Everything)时,OpenSSH允许远程攻击者决定特定用户账户的存放位置。如果用户的账户存在和被配置成使用一次性密码(OTP)时,它会显示不同的响应。此漏洞与CVE-2007-2243相似。
CVSS Information
N/A
Vulnerability Type
N/A