Unscored severity · published May 21, 2007
CVE-2007-2768
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different…
–
CVSS
8.6%
EPSS
No
On KEV
Description
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HM
Hci Management Node · Netapp
All versions, or not specified · source: NVD
HS
Hci Storage Node · Netapp
All versions, or not specified · source: NVD
OP
Openssh · Openbsd
All versions, or not specified · source: NVD
SO
Solidfire · Netapp
All versions, or not specified · source: NVD
SC
Steelstore Cloud Integrated Storage · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2768
Broken Link
http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html
Broken Link
http://www.osvdb.org/34601
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191107-0002/
More from Hci Management Node
7.8
CVE-2021-22555
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
7.8
CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability
7.8
CVE-2019-2215
Android Kernel Use-After-Free Vulnerability
7.8
CVE-2019-13272
Linux Kernel Improper Privilege Management Vulnerability
9.8
CVE-2022-32207
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…