CVE-2004-1602
NUCLEIProFTPD 1.2.0-1.2.10 - Username Enumeration via Timing Discrepancy
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1602. PoCs published by Leon Juranic. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages a timing attack during the ProFTPD login procedure to determine valid usernames by measuring microsecond-level delays in server responses. It sends multiple 'USER' commands and calculates the average response time to infer user existence.
Description
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Exploits (1)
This exploit leverages a timing attack during the ProFTPD login procedure to determine valid usernames by measuring microsecond-level delays in server responses. It sends multiple 'USER' commands and calculates the average response time to infer user existence.
Nuclei Templates (1)
product:"proftpd" || cpe:"cpe:2.3:a:proftpd:proftpd"