CVE-2004-0939

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the…

published November 19, 2004

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01630 · 75.9th percentile
Published
2004-11-19T05:00Z
EPSS history
Timeline
  • 19 NOV 05:00Z
    changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the…
    cvelistv5