CVE-2001-1483
One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-203
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nrl.navy:one-time_passwords_in_everything
References
- http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
- http://www.securityfocus.com/bid/3549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7572
- http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
- http://www.securityfocus.com/bid/3549