The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
References
Configurations
Information
Published : 2005-05-17 21:00
Updated : 2008-09-05 13:49
NVD link : CVE-2005-1650
Mitre link : CVE-2005-1650
JSON object : View
CWE
Products Affected
woppoware
- postmaster