CVE-2005-0486

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.tarantella.com/security/bulletin-11.htmlPatch, Vendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/19407
http://www.tarantella.com/security/bulletin-11.htmlPatch, Vendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/19407

Timeline

Published: Mar 30, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-04876.8Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inj CVE-2005-04885.0Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive en CVE-2005-04894.9The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cau CVE-2005-04908.8Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute CVE-2005-049110.0Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a long type 77 request.CVE-2005-04922.6Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF file that contains a CVE-2005-04935.0CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-ma CVE-2005-04947.5The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly val CVE-2005-04954.3Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) ye CVE-2005-04969.8Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to acc CVE-2005-04977.2ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment var CVE-2005-04987.5Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page via a direct request to