EIP-2026-114740

This exploit demonstrates an information leakage vulnerability in Solaris ftp daemon (in.ftpd) where remote users can enumerate valid usernames by sending CWD commands with ~username before authentication. The daemon responds differently for valid vs. invalid usernames, allowing account enumeration.