PT-2005-2627 · Woppoware · Woppoware Postmaster
CVE-2005-1650
·
Published
2005-05-18
·
Updated
2024-02-14
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Woppoware PostMaster version 4.2.2
Description
The web mail service in the affected software generates different error messages depending on whether a user exists or not. This allows remote attackers to determine valid usernames.
Recommendations
For version 4.2.2, consider restricting access to the web mail service until a fix is available, or implement additional authentication measures to minimize the risk of exploitation.
Fix
Side Channel Attack
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Woppoware Postmaster