vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1008628 |
Configurations
Information
Published : 2004-02-02 21:00
Updated : 2008-09-10 12:24
NVD link : CVE-2004-0042
Mitre link : CVE-2004-0042
JSON object : View
CWE
Products Affected
beasts
- vsftpd