CVEvulnerability

CVE-2001-1483

5.0 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-203

Description

One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.

Affected configurations

• nrl.navy one-time passwords in everything 2.4 • nrl.navy one-time passwords in everything 2.32

Weakness · CWE (1)

CWE-203 Observable Discrepancy weakness

Referenced by CWE · observed example (3)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
CWE-203 Observable Discrepancy weakness
CWE-204 Observable Response Discrepancy weakness

References

http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/3549 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572 Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu Broken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/3549 Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572 Third Party Advisory, VDB Entry