CVE-2007-2768

Published: May 21, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

Affected (5)

Products: Openbsd: Openssh · Netapp: Hci Management Node, Hci Storage Node, Solidfire, Steelstore Cloud Integrated Storage

1 product

4 products

Steelstore Cloud Integrated Storage

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	All versions

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci Management Node	All versions
Netapp Hci Storage Node	All versions
Netapp Solidfire	All versions
Netapp Steelstore Cloud Integrated Storage	All versions