Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2003-0637

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Novell iChain 2.2 Support Pack 1之前版本为不存在的用户比有效用户使用更短超时。远程攻击者可以利用该漏洞更容易猜测用户名并执行暴力密码破译。

AI Predicted 5.3 Difficulty: Easy EPSS 1.48% · P72
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2003-0637

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Novell iChain信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Novell iChain 2.2 Support Pack 1之前版本为不存在的用户比有效用户使用更短超时。远程攻击者可以利用该漏洞更容易猜测用户名并执行暴力密码破译。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2003-0637

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-0637

请登录查看更多情报信息。

Other References for CVE-2003-0637 (1)

Same Patch Batch · n/a · 2003-08-02 · 12 CVEs total

CVE-2003-0631 VMware GSX Server，Workstation权限许可和访问控制漏洞
CVE-2003-0632 Oracle E-Business Suite缓冲区溢出漏洞
CVE-2003-0633 Oracle E-Business Suite Oracle Applications AOL/J Setup Test Suite信息泄漏漏洞
CVE-2003-0634 Oracle数据库服务器EXTPROC远程缓冲区溢出漏洞
CVE-2003-0635 Novell iChain未知漏洞
CVE-2003-0636 Novell iChain漏洞
CVE-2003-0638 Novell iChain和iChain缓冲区溢出漏洞
CVE-2003-0639 Novell iChain未知漏洞
CVE-2003-0640 BEA WebLogic服务器和Express NodeManager权限许可和访问控制漏洞
CVE-2003-0641 WatchGuard ServerLock未授权内核模块装载漏洞
CVE-2003-0642 WatchGuard ServerLock物理内存设备访问漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-0637

No comments yet

Leave a comment