CVE-2005-1650 - The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames

Back Back to CVE browser

MEDIUM

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames

Published May 18, 2005

5.0

MEDIUM

CVSS 2.0

EPSS 1.66%

Description

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-203

References (2)

http://secunia.com/advisories/15268
third-party-advisoryx_refsource_SECUNIABroken Link
http://www.securityfocus.com/bid/13597
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://secunia.com/advisories/15268		third-party-advisoryx_refsource_SECUNIABroken Link
http://www.securityfocus.com/bid/13597		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 18, 2005

Updated Sep 17, 2024

Reserved May 18, 2005

Link CVE-2005-1650

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1650

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-1650