Design/Logic Flaw

OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang...

Multiple bugs in hostingcontroller

Different error message on wrong user name and password makes it possible to check account existance. Directory traversal allows to access files outside web root...

CVE-2001-1483

One-Time Passwords In Everything a.k.a OPIE 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist...

PT-2001-2573 · Opie · One-Time Passwords In Everything

Name of the Vulnerable Software and Affected Versions: One-Time Passwords In Everything a.k.a OPIE versions 2.32 through 2.4 Description: The issue allows remote attackers to determine the existence of user accounts. This is achieved by the system printing random passphrases if the user account...