Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent malicious users to determine valid Active Directory account names.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft windows 2003 server sp1 |
||
microsoft windows 2003 server sp2 |
||
microsoft windows 2003 server gold |
Vulmon