CVE-2001-1483

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-12-31 · updated 2026-06-16
Weakness: CWE-203

Description

One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.

Affected products

Nrl.Navy One-Time Passwords In Everything: 2.4, 2.32

References

http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
http://www.securityfocus.com/bid/3549
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572
http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu
http://www.securityfocus.com/bid/3549
https://exchange.xforce.ibmcloud.com/vulnerabilities/7572

Get alerted when CVE-2001-1483 or the next vulnerability affects your stack