CVE ID:	CVE-2009-1384
Description:	pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
Test IDs:	1.3.6.1.4.1.25623.1.0.66976   1.3.6.1.4.1.25623.1.0.64301   1.3.6.1.4.1.25623.1.0.67161   1.3.6.1.4.1.25623.1.0.64299
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1384 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 35112 http://www.securityfocus.com/bid/35112 35230 http://secunia.com/advisories/35230 43314 http://secunia.com/advisories/43314 54791 http://osvdb.org/54791 ADV-2009-1448 http://www.vupen.com/english/advisories/2009/1448 MDVSA-2010:054 http://www.mandriva.com/security/advisories?name=MDVSA-2010:054 [oss-security] 20090527 CVE assignment notification (pam_krb5 CVE-2009-1384) http://www.openwall.com/lists/oss-security/2009/05/27/1 http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html https://bugzilla.redhat.com/show_bug.cgi?id=502602 https://bugzilla.redhat.com/show_bug.cgi?id=502602 oval:org.mitre.oval:def:7081 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7081 oval:org.mitre.oval:def:9652 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9652