Lucene search
+L

pam_krb5: Password prompt varies for existent and non-existent users

🗓️ 29 Mar 2010 12:00:00Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 4 Views

pam_krb5 prompts differently for existing versus non-existent users, enabling username enumeration.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2009-1384
28 May 200920:14
cve
cvelist
Cvelist
CVE-2009-1384
28 May 200920:14
cvelist
debiancve
Debian CVE
CVE-2009-1384
28 May 200920:14
debiancve
oraclelinux
Oracle linux
pam_krb5 security and bug fix update
5 Apr 201000:00
oraclelinux
euvd
EUVD
EUVD-2009-1382
7 Oct 202500:30
euvd
fedora
Fedora
[SECURITY] Fedora 11 Update: pam_krb5-2.3.5-1.fc11
27 Jun 200902:49
fedora
fedora
Fedora
[SECURITY] Fedora 10 Update: pam_krb5-2.3.5-1.fc10
27 Jun 200902:40
fedora
fedora
Fedora
[SECURITY] Fedora 9 Update: pam_krb5-2.3.5-1.fc9
27 Jun 200903:02
fedora
nessus
Tenable Nessus
Fedora 11 : pam_krb5-2.3.5-1.fc11 (2009-5983)
28 Jun 200900:00
nessus
nessus
Tenable Nessus
Fedora 10 : pam_krb5-2.3.5-1.fc10 (2009-6255)
28 Jun 200900:00
nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linuxanyi386pam_krb52.2.14-15pam_krb5-2.2.14-15.i386.rpm
Red Hat Enterprise Linuxanyia64pam_krb52.2.14-15pam_krb5-2.2.14-15.ia64.rpm
Red Hat Enterprise Linuxanyppcpam_krb52.2.14-15pam_krb5-2.2.14-15.ppc.rpm
Red Hat Enterprise Linuxanyppc64pam_krb52.2.14-15pam_krb5-2.2.14-15.ppc64.rpm
Red Hat Enterprise Linuxanys390pam_krb52.2.14-15pam_krb5-2.2.14-15.s390.rpm
Red Hat Enterprise Linuxanys390xpam_krb52.2.14-15pam_krb5-2.2.14-15.s390x.rpm
Red Hat Enterprise Linuxanyx86_64pam_krb52.2.14-15pam_krb5-2.2.14-15.x86_64.rpm
Red Hat Enterprise Linuxanyi386pam_krb5-debuginfo2.2.14-15pam_krb5-debuginfo-2.2.14-15.i386.rpm
Red Hat Enterprise Linuxanyia64pam_krb5-debuginfo2.2.14-15pam_krb5-debuginfo-2.2.14-15.ia64.rpm
Red Hat Enterprise Linuxanyppcpam_krb5-debuginfo2.2.14-15pam_krb5-debuginfo-2.2.14-15.ppc.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Jun 2026 10:36Current
5.9Medium risk
Vulners AI Score5.9
CVSS 25
EPSS0.03326
4