The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-07-13T14:00:00Z
Updated: 2024-09-17T02:41:12.346Z
Reserved: 2009-07-13T00:00:00Z
Link: CVE-2009-2435
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2009-07-13T14:30:00.217
Modified: 2024-02-14T01:17:43.863
Link: CVE-2009-2435
Redhat
No data.