CVE-2005-0486

Published: Mar 30, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive information during authentication, which allows remote attackers to identify valid usernames and the authentication scheme.

Affected (4)

Products: Tarantella: Secure Global Desktop, Tarantella Enterprise

Tarantella

2 products

Secure Global Desktop

Tarantella Enterprise

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Tarantella Secure Global Desktop	Version enterprise_3.42
Tarantella Secure Global Desktop	Version enterprise_4.0
Tarantella Tarantella Enterprise	Version 3.30
Tarantella Tarantella Enterprise	Version 3.40

References (4)

http://www.tarantella.com/security/bulletin-11.html

Source: cve@mitre.org

PatchVendor AdvisoryURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/19407

Source: cve@mitre.org

http://www.tarantella.com/security/bulletin-11.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor AdvisoryURL Repurposed

https://exchange.xforce.ibmcloud.com/vulnerabilities/19407

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.