CVE-2007-5939

The gssuserok function in appl/ftp/ftpd/gssuserok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is...

BMC Remedy Action Request System user enumeration vulnerability

Messages for invalid password and invalid user name are different...

CVE-2002-1969

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

CVE-2002-1969: Undefined Security Weakness

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

ArGoSoft FTP Server user enumeration

Server reports invalid username...

CVE-2002-1969

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

Open WebMail 1.71 "background" magic info

Hello Folks, Open Webmail is a perl webmail program that runs on UNIX operational systems. For more about Open WebMail, its official website is http://openwebmail.org/. Ok, lets talk about the problem. Ive tested Open WebMail 1.71 an when you enter an invalid username user that doesnt exist on th...

Netscape Messaging server 4.15 poor error strings

Hello, I have searched for anything regarding this problem, and haven't found anything so I apologize if this has already been covered. I am dealing with Netscape Messaging Server aka Iplanet Messaging server 4.15p1 mar 15 2000. The problem is that the POP3 server displays a different message for...