Description
Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks.
References
- 14648 vdb-entry
- 1013408 vdb-entry
- http://www.infobyte.com.ar/adv/ISR-05.html
- 14607 third-party-advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm
- 20050315 [ISR] - Novell iChain Mini FTP Server Bruteforce Problem mailing-list