CVE-2001-1483: Medium severity Nrl Opie vulnerability

Published Dec 31, 2001

Updated

One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.

Affected Software

4 affected components

Nrl Opie=2.32

Nrl Opie=2.4

Nrl.navy One-time Passwords In Everything=2.4

Nrl.navy One-time Passwords In Everything=2.32

Event History

Dec 31, 2001

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1483?

CVE-2001-1483 is considered a medium severity vulnerability due to the potential for remote attackers to enumerate user accounts.

How do I fix CVE-2001-1483?

To fix CVE-2001-1483, upgrade to OPIE version 2.4 or later where this vulnerability is addressed.

What are the affected versions for CVE-2001-1483?

The affected versions for CVE-2001-1483 are OPIE 2.32 and 2.4.

What exploits are associated with CVE-2001-1483?

CVE-2001-1483 can be exploited by remote attackers to discover valid user accounts on the system.

What is the impact of CVE-2001-1483 on security?

The impact of CVE-2001-1483 on security is that it allows unauthorized users to identify valid user accounts, which can aid in further attacks.