CVE:CVE-2007-2768
CNNVD:CNNVD-200705-424
当为PAM使用OPIE(One-Time Passwords in Everything)时，OpenSSH允许远程攻击者决定特定用户账户的存放位置。如果用户的账户存在和被配置成使用一次性密码(OTP)时，它会显示不同的响应。此漏洞与CVE-2007-2243相似。
solution:Upgrade openbsd openssh to a higher version than *; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -