CVE-2005-0486
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
Tarantella Secure Global Desktop Enterprise Edition 4.00 y 3.42, y Tarantella Enterprise 3 3.40 y 3.30, cuando utiliza RSA SecurID y múltiples usuarios tienen el mismo nombre de usuario, revela información sensible durante el proceso de autenticación, lo que permite a atacantes remotos identificar nombres de usuario válidos y el esquema de autenticación.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-02-19 CVE Reserved
- 2005-02-19 CVE Published
- 2024-01-27 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/19407 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.tarantella.com/security/bulletin-11.html | 2024-02-14 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tarantella Search vendor "Tarantella" | Secure Global Desktop Search vendor "Tarantella" for product "Secure Global Desktop" | enterprise_3.42 Search vendor "Tarantella" for product "Secure Global Desktop" and version "enterprise_3.42" | - |
Affected
| ||||||
| Tarantella Search vendor "Tarantella" | Secure Global Desktop Search vendor "Tarantella" for product "Secure Global Desktop" | enterprise_4.0 Search vendor "Tarantella" for product "Secure Global Desktop" and version "enterprise_4.0" | - |
Affected
| ||||||
| Tarantella Search vendor "Tarantella" | Tarantella Enterprise Search vendor "Tarantella" for product "Tarantella Enterprise" | 3.30 Search vendor "Tarantella" for product "Tarantella Enterprise" and version "3.30" | - |
Affected
| ||||||
| Tarantella Search vendor "Tarantella" | Tarantella Enterprise Search vendor "Tarantella" for product "Tarantella Enterprise" | 3.40 Search vendor "Tarantella" for product "Tarantella Enterprise" and version "3.40" | - |
Affected
| ||||||