The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
References
Link Resource
http://secunia.com/advisories/15268 Broken Link
http://www.securityfocus.com/bid/13597 Broken Link Third Party Advisory VDB Entry
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-03T16:22:42

Updated: 2022-10-03T16:22:42

Reserved: 2022-10-03T00:00:00


Link: CVE-2005-1650

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2005-05-18T04:00:00.000

Modified: 2024-02-14T14:43:45.090


Link: CVE-2005-1650

JSON object: View

cve-icon Redhat Information

No data.

CWE