CVE-2007-2243

Publication date 25 April 2007

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483.

Status

Package Ubuntu Release Status
openssh 7.10 gutsy Ignored end of life
7.04 feisty Ignored end of life
6.10 edgy Ignored end of life
6.06 LTS dapper Ignored end of life