Vulnerabilities > CVE-2004-0939 - Unspecified vulnerability in Neoteris Instant Virtual Extranet

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
neoteris
NVD
Published: 2005-02-09
Updated: 2024-11-20

Summary

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

Vulnerable Configurations

Part Description Count
Application
Neoteris
1

References