CVE

Id
9856  
CVE No.
CVE-2004-1428  
Status
Candidate  
Description
ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames.  
Phase
Assigned (20050212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
67269 9856 CVE-2004-1428 BUGTRAQ:20041231 ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks  View
67270 9856 CVE-2004-1428 URL:http://marc.info/?l=bugtraq&m=110451582011666&w=2  View
67271 9856 CVE-2004-1428 MISC:http://www.lovebug.org/argosoft_advisory.txt  View
67272 9856 CVE-2004-1428 CONFIRM:http://www.argosoft.com/ftpserver/changelist.aspx  View
67273 9856 CVE-2004-1428 BID:12139  View
67274 9856 CVE-2004-1428 URL:http://www.securityfocus.com/bid/12139  View
67275 9856 CVE-2004-1428 OSVDB:11335  View
67276 9856 CVE-2004-1428 URL:http://www.osvdb.org/11335  View
67277 9856 CVE-2004-1428 SECTRACK:1012744  View
67278 9856 CVE-2004-1428 URL:http://securitytracker.com/id?1012744  View
67279 9856 CVE-2004-1428 SECUNIA:13063  View
67280 9856 CVE-2004-1428 URL:http://secunia.com/advisories/13063  View
67281 9856 CVE-2004-1428 XF:argosoft-information-disclosure(18721)  View

Related JVN