CVE-2004-0042

vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-02-03

Last modified

2024-08-08

Affected products

• Vsftpd (Beasts)

References

• http://securitytracker.com/id?1008628