Vulnerability record · CVE-2007-2768 · published 21 May 2007

CVE-2007-2768: Openbsd openssh information exposure vulnerability

Openbsd · Openssh

OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

4.3 CVSS 2.0 Medium EPSS 8.6% · top 5.1% CWE-200 · Information exposure

4.3CVSS 2.0 base score

8.6%EPSS exploitation probability, 30 days

NoNot in CISA KEV

5Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

NHci Management Node Netapp NHci Storage Node Netapp NSolidfire Netapp NSteelstore Cloud Integrated Storage Netapp

Openssh Openbsd

References

Link	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html	Broken Link
http://www.osvdb.org/34601	Broken Link
https://security.netapp.com/advisory/ntap-20191107-0002/	Third Party Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html	Broken Link
http://www.osvdb.org/34601	Broken Link
https://security.netapp.com/advisory/ntap-20191107-0002/	Third Party Advisory

Track CVE-2007-2768 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-22555Linux kernel netfilter x_tables heap out-of-bounds writeA heap out-of-bounds write exists in the Linux kernel netfilter x_tables code (net/netfilter/x_tables.c), present since v2.6.19-rc1. A local attacker…KEVEPSS 79%analysed7 Jul 2021 7.8CVE-2021-3156Sudo off-by-one heap overflow allows root privilege escalationSudo before 1.9.5p2 contains an off-by-one error leading to a heap-based buffer overflow. Triggering it via 'sudoedit -s' with a command-line argumen…KEVEPSS 100%analysed26 Jan 2021 7.8CVE-2019-2215Android Binder use-after-free allows kernel privilege escalationCVE-2019-2215 is a use-after-free in binder.c in the Android/Linux kernel that lets a local application escalate privileges to the kernel. It matters…KEVEPSS 72%analysed11 Oct 2019 7.8CVE-2019-13272Linux kernel ptrace credential mishandling allows local root escalationThe Linux kernel before 5.1.17 mishandles credential recording in ptrace_link (kernel/ptrace.c) when a process creates a ptrace relationship, and als…KEVEPSS 52%analysed17 Jul 2019 7.0CVE-2016-5195Linux Kernel Dirty COW Race Condition Privilege EscalationA race condition in the Linux kernel's mm/gup.c mishandles copy-on-write, letting a local user write to read-only memory mappings. This breaks the re…KEVEPSS 84%analysed10 Nov 2016 10.0CVE-2003-0786Openbsd openssh vulnerabilityThe SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the …EPSS 3.6%17 Nov 2003 10.0CVE-2003-0693Openbsd openssh vulnerabilityA "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing…EPSS 11%22 Sep 2003 10.0CVE-2002-0640Openbsd openssh vulnerabilityBuffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during chal…EPSS 27%3 Jul 2002

Source: NIST National Vulnerability Database (record CVE-2007-2768), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.