Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
                
            References
                    | Link | Resource | 
|---|---|
| http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm | Patch | 
Configurations
                    Information
                Published : 2003-08-26 21:00
Updated : 2008-09-05 13:34
NVD link : CVE-2003-0637
Mitre link : CVE-2003-0637
JSON object : View
CWE
                Products Affected
                novell
- ichain


