CVE-2004-0939: Neoteris Instant Virtual Extranet

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

Affected products

• Neoteris Instant Virtual Extranet: any version

Published 2005-02-09. Last modified 2026-06-16.