Debian/openssh: unknown

OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2007-2243#Debian:13/openssh
• https://security-tracker.debian.org/tracker/CVE-2007-2243

published 2007-04-25T16:19:00Z · modified 2026-10-21T17:47:48.528880226Z · JSON