Solaris FTP Daemon CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD , even before logging in. An attacker can exploit this flaw to determine the existence of known vulnerable accounts. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid1065...

FTPd CWD Command Account Enumeration

It is possible to determine the existence of a user on the remote system by issuing the command CWD . An attacker may use this to determine the existence of known to be vulnerable accounts like guest or to determine which system you are running. C Tenable Network Security, Inc. include"compat.inc...