Vulnerability Description
Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell | Edirectory | 8.6.2 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.htmlBroken Link
- http://www.iss.net/security_center/static/9229.phpBroken Link
- http://www.securityfocus.com/bid/4893Broken LinkThird Party AdvisoryVDB Entry
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.htmlBroken Link
- http://www.iss.net/security_center/static/9229.phpBroken Link
- http://www.securityfocus.com/bid/4893Broken LinkThird Party AdvisoryVDB Entry
FAQ
What is CVE-2002-2119?
CVE-2002-2119 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.
How severe is CVE-2002-2119?
CVE-2002-2119 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2002-2119?
Check the references section above for vendor advisories and patch information. Affected products include: Novell Edirectory.