VDB
DEBIAN-CVE-2007-2768
DEBIAN-CVE-2007-2768
PUBLISHED
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | openssh | 10.0, 0, 0 |
| Debian:12 | openssh | 1:10.2p1-6~bpo13+1, 1:9.2p1-2, 1:9.2p1-2+deb12u1 |
| Debian:14 | openssh | 0, 10.0, 10.0 |
| Debian:11 | openssh | 1:10.0p1-7, 1:10.0p1-7~bpo12+1, 1:10.0p1-8 |
Timeline
- May 21, 2007 CVE Published
- Aug 4, 2026 CVE Updated