Vulnerability in Novell Ichain
CVE-2003-0637
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.
Affected products
- Novell Ichain — versions 2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Broken Link)