CVE-2005-0486
First published: Sat Feb 19 2005(Updated: )
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Tarantella Enterprise | =3.40 | |
| Oracle Tarantella Enterprise | =3.30 | |
| Oracle Virtualization Secure Global Desktop | =enterprise_3.42 | |
| Oracle Virtualization Secure Global Desktop | =enterprise_4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-0486?
CVE-2005-0486 has a medium severity rating due to its potential to expose sensitive authentication information.
How do I fix CVE-2005-0486?
To fix CVE-2005-0486, update to the latest versions of Tarantella Secure Global Desktop and Tarantella Enterprise that address this vulnerability.
What are the affected software versions for CVE-2005-0486?
Affected software versions for CVE-2005-0486 include Tarantella Secure Global Desktop 4.00 and 3.42, and Tarantella Enterprise 3.30 and 3.40.
Can CVE-2005-0486 allow username enumeration?
Yes, CVE-2005-0486 allows remote attackers to identify valid usernames due to the information revealed during authentication.
What impact does CVE-2005-0486 have on user privacy?
CVE-2005-0486 can compromise user privacy by disclosing sensitive authentication information that may be utilized in unauthorized access attempts.
- agent/references
- agent/type
- agent/author
- agent/description
- agent/remedy
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/tarantella
- canonical/oracle tarantella enterprise
- version/oracle tarantella enterprise/3.40
- version/oracle tarantella enterprise/3.30
- canonical/oracle virtualization secure global desktop
- version/oracle virtualization secure global desktop/enterprise_3.42
- version/oracle virtualization secure global desktop/enterprise_4.0