CVE-2002-2119 Weak cryptography in n/a

Critical 9.8 Published 5 Aug 2005 Updated 16 Sep 2024

Novell eDirectory uses case-insensitive passwords, facilitating brute-force attacks and allowing attackers to bypass authentication.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2002-2119?

CVE-2002-2119 is a critical vulnerability in Novell Edirectory, published on 5 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.

Weakness: CWE-178

Which versions are affected by CVE-2002-2119?

It affects 1 product.

Products include Novell Edirectory.

How do I fix CVE-2002-2119?

No fix has been published for CVE-2002-2119 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-2119 being exploited?

There is no known exploitation of CVE-2002-2119 in the wild and no public exploit code.

All Novell Edirectory vulnerabilities

Sources

Also known as GHSA-mp9h-8rrx-27f5.