Lucene search
+L

2 matches found

OSV
OSV
added 2014/03/09 1:16 p.m.9 views

CVE-2013-7322

usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password OTP type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay...

6.2AI score
SaveExploits0References6
Cvelist
Cvelist
added 2014/03/07 8:0 p.m.36 views

CVE-2013-7322

usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password OTP type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay...

6.1AI score0.00884EPSS
SaveExploits0References6
Rows per page
Query Builder