CVE-2005-4673

The CVE-2005-4673 entry concerns ioFTPD version 0.5.84u, where the login reply differs depending on whether a username exists, enabling remote attackers to enumerate valid usernames. This is the core vulnerability: user enumeration via auth responses. The provided documents do not specify a fix o...