CVE-2008-1618

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on…

published April 7, 2008

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01738 · 77.5th percentile
Published
2008-04-07T18:00Z
EPSS history
Timeline
  • 07 APR 18:00Z
    The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on…
    cvelistv5