| Description: | Sebastian Krahmer discovered that opie, a system that makes it simple to use One-Time passwords in applications, is prone to a privilege escalation and an off-by-one error, which can lead to the execution of arbitrary code. Adam Zabrocki and Maksymilian Arciemowicz also discovered another off-by-one error, which only affects the lenny version as the fix was already included for squeeze. |