CVE-2009-1769: Infoleak
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1769?
CVE-2009-1769 has been classified with a medium severity due to its potential for username enumeration, which can lead to further attacks.
How do I fix CVE-2009-1769?
To fix CVE-2009-1769, it is recommended to upgrade to a more recent version of OCS Inventory NG that does not exhibit this vulnerability.
What type of vulnerability is CVE-2009-1769?
CVE-2009-1769 is a security vulnerability related to improper error handling that allows attackers to enumerate valid usernames.
What software is affected by CVE-2009-1769?
The vulnerability affects Open Computer and Software Inventory Next Generation version 1.01.
Can CVE-2009-1769 be exploited remotely?
Yes, CVE-2009-1769 can be exploited remotely by attackers to identify valid usernames on the system.