CVE Kennung:	CVE-2009-1384
Beschreibung:	pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.67161   1.3.6.1.4.1.25623.1.0.64299   1.3.6.1.4.1.25623.1.0.64301   1.3.6.1.4.1.25623.1.0.64308   1.3.6.1.4.1.25623.1.0.66976
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1384 BugTraq ID: 35112 http://www.securityfocus.com/bid/35112 Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) http://www.securityfocus.com/archive/1/516397/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2010:054 http://www.openwall.com/lists/oss-security/2009/05/27/1 http://osvdb.org/54791 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652 http://secunia.com/advisories/35230 http://secunia.com/advisories/43314 http://www.vupen.com/english/advisories/2009/1448