CVE-2001-1483

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-203

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.eduBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/3549Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.eduBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/3549Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14847.5Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bo CVE-2001-14874.6popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via CVE-2001-14885.0Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attacke CVE-2001-14895.0Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a l CVE-2001-14905.0Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of i CVE-2001-14915.0Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of imag CVE-2001-14945.5script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescr CVE-2001-14957.5network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target par CVE-2001-14969.8Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of servic CVE-2001-14972.1Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters us CVE-2001-14987.2Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.CVE-2001-14995.0Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on