CVE-2009-1293 - The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames

Back Back to CVE browser

MEDIUM

The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames

Published Apr 16, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 1.82%

Description

The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (8)

http://secunia.com/advisories/34714
third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/archive/1/502704/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34531
vdb-entryx_refsource_BIDExploit
http://www.securitytracker.com/id?1022063
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1048
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1291
Advisory
https://www.sec-consult.com/files/20090415-0-novell-teaming.txt
x_refsource_MISCExploit

Link	Providers	Tags
http://secunia.com/advisories/34714		third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/archive/1/502704/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/34531		vdb-entryx_refsource_BIDExploit
http://www.securitytracker.com/id?1022063		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1048		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1291		Advisory
https://www.sec-consult.com/files/20090415-0-novell-teaming.txt		x_refsource_MISCExploit