PT-2002-2839 · Novell · Novell Edirectory

CVE-2002-2119 · Publicado 2002-12-31 · Atualizado 2024-02-08

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.6.2 through 8.7

Description: The issue allows remote attackers to conduct brute force password guessing more easily due to the use of case insensitive passwords.

Recommendations: For Novell eDirectory versions 8.6.2 through 8.7, consider implementing additional security measures to prevent brute force attacks, such as account lockout policies or IP blocking. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-178

Identificadores relacionados

CVE-2002-2119

Produtos afetados

Novell Edirectory

Referências · 5

• http://iss.net/security_center/static/9229.php · Nota
• https://t.me/cvenotify/70540 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2002-2119 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html · Nota
• http://securityfocus.com/bid/4893 · Nota