EUVD-2008-1619

Malware in sbrugna...

CVE-2008-1618: Exposure of Sensitive Information to an Unauthorized Actor

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...