ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-12-31 05:00
Updated : 2017-07-11 01:31
NVD link : CVE-2004-1428
Mitre link : CVE-2004-1428
JSON object : View
Products Affected
argosoft
- ftp_server
CWE
