CVE-2007-2768

CVE-2007-2768 describes an information disclosure vulnerability in OpenSSH, specifically when configured to use OPIE for PAM, affecting various NetApp and OpenBSD products. An unauthenticated remote attacker can determine the existence of user accounts by observing differing responses when a user account exists and is configured for one-time passwords. With a CVSS score of 4.3 (medium severity), this vulnerability has a network attack vector, medium attack complexity, and a potential impact of partial confidentiality, allowing for user enumeration. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.