Lucene search

[email protected]NVD:CVE-2007-2243

HistoryApr 25, 2007 - 4:19 p.m.

CVE-2007-2243

2007-04-2516:19:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

80.7%

JSON

OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483.

Affected configurations

Nvd

Node

openbsdopensshMatch1.2

openbsdopensshMatch1.2.1

openbsdopensshMatch1.2.2

openbsdopensshMatch1.2.3

openbsdopensshMatch1.2.27

openbsdopensshMatch2.1

openbsdopensshMatch2.1.1

openbsdopensshMatch2.2

openbsdopensshMatch2.3

openbsdopensshMatch2.5

openbsdopensshMatch2.5.1

openbsdopensshMatch2.5.2

openbsdopensshMatch2.9

openbsdopensshMatch2.9.9

openbsdopensshMatch2.9.9p2

openbsdopensshMatch2.9p1

openbsdopensshMatch2.9p2

openbsdopensshMatch3.0

openbsdopensshMatch3.0.1

openbsdopensshMatch3.0.1p1

openbsdopensshMatch3.0.2

openbsdopensshMatch3.0.2p1

openbsdopensshMatch3.0p1

openbsdopensshMatch3.1

openbsdopensshMatch3.1p1

openbsdopensshMatch3.2

openbsdopensshMatch3.2.2

openbsdopensshMatch3.2.2p1

openbsdopensshMatch3.2.3p1

openbsdopensshMatch3.3

openbsdopensshMatch3.3p1

openbsdopensshMatch3.4

openbsdopensshMatch3.4p1

openbsdopensshMatch3.5

openbsdopensshMatch3.5p1

openbsdopensshMatch3.6

openbsdopensshMatch3.6.1

openbsdopensshMatch3.6.1p1

openbsdopensshMatch3.6.1p2

openbsdopensshMatch3.7

openbsdopensshMatch3.7.1

openbsdopensshMatch3.7.1p1

openbsdopensshMatch3.7.1p2

openbsdopensshMatch3.8

openbsdopensshMatch3.8.1

openbsdopensshMatch3.8.1p1

openbsdopensshMatch3.9

openbsdopensshMatch3.9.1

openbsdopensshMatch3.9.1p1

openbsdopensshMatch4.0

openbsdopensshMatch4.0p1

openbsdopensshMatch4.1

openbsdopensshMatch4.1p1

openbsdopensshMatch4.2

openbsdopensshMatch4.2p1

openbsdopensshMatch4.3

openbsdopensshMatch4.3p1

openbsdopensshMatch4.3p2

openbsdopensshMatch4.4

openbsdopensshMatch4.4p1

openbsdopensshMatch4.5

openbsdopensshMatch4.6

VendorProductVersionCPE
openbsdopenssh1.2cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*
openbsdopenssh1.2.1cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*
openbsdopenssh1.2.2cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*
openbsdopenssh1.2.3cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*
openbsdopenssh1.2.27cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*
openbsdopenssh2.1cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*
openbsdopenssh2.1.1cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*
openbsdopenssh2.2cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*
openbsdopenssh2.3cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*
openbsdopenssh2.5cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openbsd	openssh	1.2	cpe:2.3:a:openbsd:openssh:1.2:::::::*
openbsd	openssh	1.2.1	cpe:2.3:a:openbsd:openssh:1.2.1:::::::*
openbsd	openssh	1.2.2	cpe:2.3:a:openbsd:openssh:1.2.2:::::::*
openbsd	openssh	1.2.3	cpe:2.3:a:openbsd:openssh:1.2.3:::::::*
openbsd	openssh	1.2.27	cpe:2.3:a:openbsd:openssh:1.2.27:::::::*
openbsd	openssh	2.1	cpe:2.3:a:openbsd:openssh:2.1:::::::*
openbsd	openssh	2.1.1	cpe:2.3:a:openbsd:openssh:2.1.1:::::::*
openbsd	openssh	2.2	cpe:2.3:a:openbsd:openssh:2.2:::::::*
openbsd	openssh	2.3	cpe:2.3:a:openbsd:openssh:2.3:::::::*
openbsd	openssh	2.5	cpe:2.3:a:openbsd:openssh:2.5:::::::*