rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
References
Configurations
Configuration 1 (hide)
AND |
|
History
07 Nov 2023, 03:05
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-10-03 19:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-15162
Mitre link : CVE-2019-15162
CVE.ORG link : CVE-2019-15162
JSON object : View
Products Affected
tcpdump
- libpcap
opengroup
- unix
CWE
CWE-345
Insufficient Verification of Data Authenticity