{"id":"CVE-2003-0637","aliases":["EUVD-2003-0631","GHSA-fv5q-cm23-v6v8"],"status":"published","title":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a...","description":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01477,"percentile":0.74053,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-203"],"published":"2003-08-02T04:00:00Z","modified":"2026-06-16T22:02:33Z","products":[{"vendor":"novell","product":"ichain"}],"references":[{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2966435.htm","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0637"},{"url":"https://github.com/advisories/GHSA-fv5q-cm23-v6v8"}],"sources":{"cve":[{"id":"CVE-2003-0637","description":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.","status":"published","published":"2003-08-02T04:00:00Z","modified":"2024-08-08T01:58:11.072Z","updated_at":"2026-11-02T14:20:16.757505Z"}],"euvd":[{"id":"EUVD-2003-0631","description":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.","status":"published","published":"2003-08-02T04:00:00Z","modified":"2024-08-08T01:58:11Z","updated_at":"2026-11-03T01:15:06.435593Z"}],"ghsa":[{"id":"GHSA-fv5q-cm23-v6v8","title":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a...","description":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.","status":"published","published":"2022-04-29T01:26:45Z","modified":"2026-03-22T05:08:28Z","cwes":["CWE-203"],"updated_at":"2026-11-02T15:06:46.535326Z"}],"nvd":[{"id":"CVE-2003-0637","description":"Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.","status":"published","published":"2003-08-27T04:00:00Z","modified":"2026-06-16T22:02:33.93Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:00:47.41445Z"}]}}