CVE:CVE-2005-0486
CNNVD:CNNVD-200503-163
使用RSA SecurID并且多个用户的用户名相同的情况下，Tarantella Secure Global Desktop Enterprise Edition 4.00和3.42，以及Tarantella Enterprise 3 3.40和3.30在身份验证过程中会显示敏感信息，远程攻击者可以识别有效的用户名和身份验证方案。
solution:Upgrade tarantella secure_global_desktop to a higher version than enterprise_3.42,enterprise_4.0,and avoid the version enterprise_3.42,enterprise_4.0; Upgrade tarantella tarantella_enterprise to a higher version than 3.30,3.40,and avoid the version 3.30,3.40