Description
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
Unscored
CVE-2003-0637
EUVD-2003-0631GHSA-fv5q-cm23-v6v8
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote …
Published Aug 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre