CVEvulnerability
CVE-2009-1293
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
Affected configurations
• novell teaming 1.0
• novell teaming 1.0.1
• novell teaming 1.0.2
• novell teaming 1.0.3
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/34714 secunia.com
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/502704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34531 Exploit
- http://www.securitytracker.com/id?1022063 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1048 www.vupen.com
- https://www.sec-consult.com/files/20090415-0-novell-teaming.txt Exploit
- http://secunia.com/advisories/34714 secunia.com
- http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002997&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737 Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/502704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/34531 Exploit
- http://www.securitytracker.com/id?1022063 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/1048 www.vupen.com
- https://www.sec-consult.com/files/20090415-0-novell-teaming.txt Exploit