Description
The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.
References (2)
Core 2
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111358863001693&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/13156
Scores
EPSS
0.0168
EPSS Percentile
74.5%
Details
Status
published
Products (1)
ibm/iseries_as_400
Published
May 02, 2005
Tracked Since
Feb 18, 2026