Description
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
http://www.infobyte.com.ar/adv/ISR-04.html
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111091027000721&w=2
Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/12811
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/14607
Scores
EPSS
0.0139
EPSS Percentile
69.0%
Details
CWE
CWE-200
Status
published
Published
Mar 15, 2005
Tracked Since
Feb 18, 2026