NetSight
medium5.0

CVE-2005-0486

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have th…

Impact

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.

Affected products

VendorProductAffected versions
TarantellaSecure Global Desktop
Versions enterprise_3.42, enterprise_4.0
TarantellaTarantella Enterprise
Versions 3.30, 3.40

References