CVE-2003-0637

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-08-27 · updated 2026-06-16
Weakness: CWE-203

Description

Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.

Affected products

Novell Ichain: 2.2

References

http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm

Get alerted when CVE-2003-0637 or the next vulnerability affects your stack