3170 matches found
CVE-1999-0407
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system...
CVE-1999-0259
cfingerd lists all users on a system via search.@target...
PT-1999-1510 · Gnome · Gdm
Name of the Vulnerable Software and Affected Versions: gdm affected versions not specified Description: The issue allows an attacker to identify valid users on a system through error messages generated by gdm when the VerboseAuth setting is enabled. Recommendations: At the moment, there is no...
Multiple Mail Server EXPN/VRFY Information Disclosure
The remote SMTP server answers to the EXPN and/or VRFY commands. The EXPN command can be used to find the delivery address of mail aliases, or even the full name of the recipients, and the VRFY command may be used to check the validity of an account. Your mailer should not allow remote users to u...
CVE-1999-1231
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server...
CVE-1999-0259
cfingerd lists all users on a system via search.@target...
PT-1997-1113 · Cfingerd · Cfingerd
Name of the Vulnerable Software and Affected Versions: cfingerd affected versions not specified Description: The issue allows cfingerd to list all users on a system via search. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2022-34623
This CVE entry is rejected/not used; reference CVE-2022-32425 instead.
