CVE-2004-1602

2004-10-15T04:00:00
ID CVE-2004-1602
Type cve
Reporter cve@mitre.org
Modified 2017-07-11T01:31:00

Description

ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.