CVE-2007-0310 - Vulnerability Details - OpenCVE

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.0097.

Key SSVC decision points have not yet been added.

Vendors	Products
Bmc	Remedy Action Request System

Configuration 1 [-]

cpe:2.3:a:bmc:remedy_action_request_system:5.01.02_patch_1267:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-0312	BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/31658
http://secunia.com/advisories/23775
http://securityreason.com/securityalert/2162
http://securitytracker.com/id?1017515
http://www.alighieri.org/advisories/advisory-remedy50102.txt
http://www.securityfocus.com/archive/1/456949/100/0/threaded
http://www.securityfocus.com/archive/1/457078/100/0/threaded
http://www.securityfocus.com/bid/22066
http://www.vupen.com/english/advisories/2007/0204
https://exchange.xforce.ibmcloud.com/vulnerabilities/31527

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-18T00:00:00

Updated: 2024-08-07T12:12:17.979Z

Reserved: 2007-01-17T00:00:00

Link: CVE-2007-0310

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-01-18T00:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0310

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-08T00:00:00", "descriptions": [{"lang": "en", "value": "BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "2162", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2162"}, {"name": "20070116 Re: Remedy Action Request System 5.01.02 - User Enumeration", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/457078/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.alighieri.org/advisories/advisory-remedy50102.txt"}, {"name": "22066", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22066"}, {"name": "1017515", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017515"}, {"name": "20070115 Remedy Action Request System 5.01.02 - User Enumeration", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/456949/100/0/threaded"}, {"name": "ADV-2007-0204", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0204"}, {"name": "23775", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23775"}, {"name": "31658", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/31658"}, {"name": "rars-login-information-disclosure(31527)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31527"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0310", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "2162", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2162"}, {"name": "20070116 Re: Remedy Action Request System 5.01.02 - User Enumeration", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/457078/100/0/threaded"}, {"name": "http://www.alighieri.org/advisories/advisory-remedy50102.txt", "refsource": "MISC", "url": "http://www.alighieri.org/advisories/advisory-remedy50102.txt"}, {"name": "22066", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22066"}, {"name": "1017515", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017515"}, {"name": "20070115 Remedy Action Request System 5.01.02 - User Enumeration", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/456949/100/0/threaded"}, {"name": "ADV-2007-0204", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0204"}, {"name": "23775", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23775"}, {"name": "31658", "refsource": "OSVDB", "url": "http://osvdb.org/31658"}, {"name": "rars-login-information-disclosure(31527)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31527"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:12:17.979Z"}, "title": "CVE Program Container", "references": [{"name": "2162", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2162"}, {"name": "20070116 Re: Remedy Action Request System 5.01.02 - User Enumeration", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/457078/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.alighieri.org/advisories/advisory-remedy50102.txt"}, {"name": "22066", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22066"}, {"name": "1017515", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017515"}, {"name": "20070115 Remedy Action Request System 5.01.02 - User Enumeration", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/456949/100/0/threaded"}, {"name": "ADV-2007-0204", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0204"}, {"name": "23775", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23775"}, {"name": "31658", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/31658"}, {"name": "rars-login-information-disclosure(31527)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31527"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0310", "datePublished": "2007-01-18T00:00:00", "dateReserved": "2007-01-17T00:00:00", "dateUpdated": "2024-08-07T12:12:17.979Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bmc:remedy_action_request_system:5.01.02_patch_1267:*:*:*:*:*:*:*", "matchCriteriaId": "A97919E3-3F83-403C-AE2F-5F7CFDBB1985", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names."}, {"lang": "es", "value": "BMC Remedy Action Request System 5.01.02 Patch 1267 genera diversos mensajes de error para las tentativas falladas de conexi\u00f3n con un username v\u00e1lido que para \u00e9stos con un username inv\u00e1lido, lo que permite que los atacantes remotos que determinen nombres de usuario v\u00e1lidos."}], "id": "CVE-2007-0310", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-18T00:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/31658"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23775"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2162"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017515"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.alighieri.org/advisories/advisory-remedy50102.txt"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/456949/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/457078/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22066"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0204"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31527"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/31658"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23775"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2162"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1017515"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.alighieri.org/advisories/advisory-remedy50102.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/456949/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/457078/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22066"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0204"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31527"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}