The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.
http://www.vupen.com/english/advisories/2009/1048
http://www.securitytracker.com/id?1022063
http://www.securityfocus.com/archive/1/502704/100/0/threaded