Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/10/2004 Updated: 15/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote malicious users to identify valid usernames by timing the server response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
proftpd proftpd

/* Details Vulnerable Systems: * ProFTPD Version 1210 and below It is possible to determine which user names are valid, which are special, and which ones do not exist on the remote system This can be accomplished by code execution path timing analysis attack at the ProFTPd login procedure There is a very small (but significant) difference in ...

CWE-203 http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 http://www.securityfocus.com/bid/11430 http://securitytracker.com/id?1011687 http://marc.info/?l=bugtraq&m=109786760926133&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17724 https://nvd.nist.gov https://www.exploit-db.com/exploits/581/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-1602

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect