Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
References
Link | Resource |
---|---|
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm | Patch |
Configurations
Information
Published : 2003-08-26 21:00
Updated : 2008-09-05 13:34
NVD link : CVE-2003-0637
Mitre link : CVE-2003-0637
JSON object : View
CWE
Products Affected
novell
- ichain