Approved changes feed: RSS · Atom

cpe:2.3:a:novell:ichain:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductIchain (46b2acf0-593b-57c1-ac1f-176c116ef747)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0798 vulnerable 2026-06-08 04:48:13.692069 Details available
Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:28.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0797 not_vulnerable 2026-06-08 04:48:13.691619 Details available
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
Published: 2005-03-20T05:00:00.000Z
Updated: 2024-08-07T21:28:28.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0746 vulnerable 2026-06-08 04:48:13.524704 Details available
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
Published: 2005-03-13T05:00:00.000Z
Updated: 2024-08-07T21:21:06.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0744 vulnerable 2026-06-08 04:48:13.522853 Details available
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
Published: 2005-03-13T05:00:00.000Z
Updated: 2024-08-07T21:21:06.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0637 vulnerable 2026-06-08 04:47:22.080309 Details available
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
Published: 2003-08-02T04:00:00.000Z
Updated: 2024-08-08T01:58:11.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0636 vulnerable 2026-06-08 04:47:22.080050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0635 vulnerable 2026-06-08 04:47:22.079726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.