CVE-2004-0939 - CVE House
Back to Database
Status published Medium CVE-2004-0939

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x,...

Vulnerability Description

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0939

Credits & Attribution

No credits recorded in the NVD database.

References

More from neoteris

View All →
CVE-2005-2640
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS...
Medium 5
CVE-2003-0217
Cross-site scripting (XSS) vulnerability in Neoteris Instant Virtual Extranet (IVE)...
Medium 6.8

Affected Vendor

Affected Software

instant virtual extranet
Vulnerable Versions:
Unknown

Timeline

Official Publish: November 19th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.