Qpopper Authentication Timing Response Account Enumeration

The remote server appears to be running a version of Qpopper that is older than 4.0.6. Versions older than 4.0.6 are vulnerable to a bug where remote attackers can enumerate valid usernames based on server responses during the authentication process. This script is based on Thomas Reinke's...

bearshare.4.0.6.txt

BearShare Directory Traversal Issue Resurfaces ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/6D0010A5PU.html SUMMARY A while back BearShare 2.2.2 was reported to have a directory traversal vulnerability in it...