PT-2005-1827 · Novell · Novell Ichain Mini Ftp Server

Francisco Amato · Published 2005-03-15 · Updated 2016-10-18 · CVE-2005-0798

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell iChain Mini FTP Server versions 2.3 and earlier

Description The issue allows remote attackers to conduct brute force login attacks due to the lack of limitation on the number of incorrect logins.

Recommendations For Novell iChain Mini FTP Server versions 2.3 and earlier, consider implementing a workaround to limit the number of incorrect login attempts to prevent brute force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0798

Affected Products

Novell Ichain Mini Ftp Server

References · 8

• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm · Vendor Advisory
• http://secunia.com/advisories/14607 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0798 · Security Note
• http://infobyte.com.ar/adv/ISR-05.html · Vendor Advisory
• http://osvdb.org/14648 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0798 · Note
• http://marc.info/?l=bugtraq&m=111091517007681&w=2 · Note
• http://securitytracker.com/id?1013408 · Note