CVE-2004-1602

ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid…

published February 20, 2005

CVSS
—
EPSS
31%
Percentile
98.2
In the wild
Unconfirmed
What it is

ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.30679 · 98.2th percentile
Published
2005-02-20T05:00Z
EPSS history
Timeline
  • 20 FEB 05:00Z
    ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid…
    cvelistv5