Vulnerability Details CVE-2001-1483
One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
- http://www.securityfocus.com/bid/3549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7572
- http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
- http://www.securityfocus.com/bid/3549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7572
Products affected by CVE-2001-1483
-
cpe:2.3:a:nrl.navy:one-time_passwords_in_everything:2.32
-
cpe:2.3:a:nrl.navy:one-time_passwords_in_everything:2.4