CVE-2008-5112

The CVE describes an LDAP authentication behavior in Microsoft Windows 2000 SP4 and Server 2003 SP1/SP2, where the Active Directory LDAP server responds differently to failed binds based on whether the user exists and is allowed to login. This enables remote attackers to enumerate valid usernames...

CVE-2008-5112

creationtimestamp| type| source ---|---|--- 2008-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32586...