pam_krb5 Existing/Non-Existing Username Enumeration Weakness

pam_krb5 Existing/Non-Existing Username Enumeration Weakness

References:

Bug 502602 - (CVE-2009-1384) CVE-2009-1384 pam_krb5: Password prompt varies fo (Jan Lieskovsky)
pam-krb5 Homepage (Russ Allbery)
ASA-2010-139 pam_krb5 security and bug fix update (RHSA-2010-0258) (Avaya)

Privacy Statement
Copyright 2010, SecurityFocus