PT-2005-2627 · Woppoware · Woppoware Postmaster
CVE-2005-1650
·
Publicado
2005-05-18
·
Atualizado
2024-02-14
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Woppoware PostMaster version 4.2.2
Description
The web mail service in the affected software generates different error messages depending on whether a user exists or not. This allows remote attackers to determine valid usernames.
Recommendations
For version 4.2.2, consider restricting access to the web mail service until a fix is available, or implement additional authentication measures to minimize the risk of exploitation.
Correção
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Woppoware Postmaster