CVE-2009-1769
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01...
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
Exploit likelihood
What each source reports
NVD Score used
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
CVE-2009-1769- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
CVE-2009-1769- Updated
- 2026-11-02
EUVDEUVD-2009-1764 No score
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
EUVD-2009-1764- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22rf-ghp5-fc8x No score
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01...
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
GHSA-22rf-ghp5-fc8x- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
CVE-2009-1769- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1769 No score
The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames.
- Record
DEBIAN-CVE-2009-1769- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ocsinventory-serverDebian:12 |
before 1.02.1-1 | 1.02.1-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1769 is a medium vulnerability (CVSS 5.0) in Ocsinventory-ng Ocs Inventory Ng, published May 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. Fixed in ocsinventory-server 1.02.1-1.
References
ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=69
secunia.com/advisories/35157
securityfocus.com/bid/35023
bugs.debian.org/cgi-bin/bugreport.cgi?bug=529344
redhat.com/archives/fedora-package-announce/2009-June/msg00063.html
Show 6 moreShow less
nvd.nist.gov/vuln/detail/CVE-2009-1769
github.com/advisories/GHSA-22rf-ghp5-fc8x
security-tracker.debian.org/tracker/CVE-2009-1769