PT-2002-2839 · Novell · Novell Edirectory

Published 2002-12-31 · Updated 2024-02-08 · CVE-2002-2119

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Novell eDirectory versions 8.6.2 through 8.7

Description: The issue allows remote attackers to conduct brute force password guessing more easily due to the use of case insensitive passwords.

Recommendations: For Novell eDirectory versions 8.6.2 through 8.7, consider implementing additional security measures to prevent brute force attacks, such as account lockout policies or IP blocking. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-178

Related Identifiers

CVE-2002-2119

Affected Products

Novell Edirectory

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2119 · Security Note
• http://iss.net/security_center/static/9229.php · Note
• https://t.me/cvenotify/70540 · Telegram Post
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html · Note
• http://securityfocus.com/bid/4893 · Note