Lucene search
K

pam_krb5: Password prompt varies for existent and non-existent users

🗓️ 29 Mar 2010 12:00:00Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 2 Views

pam_krb5 prompts differently for existing versus non-existent users, enabling username enumeration.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2009-1384
28 May 200920:14
cve
Cvelist
CVE-2009-1384
28 May 200920:14
cvelist
Debian CVE
CVE-2009-1384
28 May 200920:14
debiancve
Oracle linux
pam_krb5 security and bug fix update
5 Apr 201000:00
oraclelinux
EUVD
EUVD-2009-1382
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 11 Update: pam_krb5-2.3.5-1.fc11
27 Jun 200902:49
fedora
Fedora
[SECURITY] Fedora 10 Update: pam_krb5-2.3.5-1.fc10
27 Jun 200902:40
fedora
Fedora
[SECURITY] Fedora 9 Update: pam_krb5-2.3.5-1.fc9
27 Jun 200903:02
fedora
Tenable Nessus
Fedora 11 : pam_krb5-2.3.5-1.fc11 (2009-5983)
28 Jun 200900:00
nessus
Tenable Nessus
Fedora 10 : pam_krb5-2.3.5-1.fc10 (2009-6255)
28 Jun 200900:00
nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux5i386pam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.i386.rpm
Red Hat Enterprise Linux5ia64pam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.ia64.rpm
Red Hat Enterprise Linux5ppcpam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.ppc.rpm
Red Hat Enterprise Linux5ppc64pam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.ppc64.rpm
Red Hat Enterprise Linux5s390pam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.s390.rpm
Red Hat Enterprise Linux5s390xpam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.s390x.rpm
Red Hat Enterprise Linux5x86_64pam_krb50:2.2.14-15pam_krb5-0:2.2.14-15.x86_64.rpm
Red Hat Enterprise Linux5i386pam_krb5-debuginfo0:2.2.14-15pam_krb5-debuginfo-0:2.2.14-15.i386.rpm
Red Hat Enterprise Linux5ia64pam_krb5-debuginfo0:2.2.14-15pam_krb5-debuginfo-0:2.2.14-15.ia64.rpm
Red Hat Enterprise Linux5ppcpam_krb5-debuginfo0:2.2.14-15pam_krb5-debuginfo-0:2.2.14-15.ppc.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Jun 2026 10:36Current
5.9Medium risk
Vulners AI Score5.9
CVSS 25
EPSS0.03326
2