vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote malicious users to identify valid usernames.
beasts vsftpd 1.1.3