CVEvulnerability
CVE-2002-0453
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
Affected configurations
• oblix netpoint 5.2
References
- http://www.iss.net/security_center/static/8461.php Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/262066 Vendor Advisory
- http://www.securityfocus.com/bid/4288 Exploit, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8461.php Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/262066 Vendor Advisory
- http://www.securityfocus.com/bid/4288 Exploit, Patch, Vendor Advisory