CVE-2003-0343 in BlackMoon FTP Server

Summary

BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account does not exist" error message when an invalid username is entered, which makes it easier for remote attackers to conduct brute force attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 05/22/2003
• Disclosure: 05/21/2003
• Moderation: VulDB entry created
• Entries: VDB-20439 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00151
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0343
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0343
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0343/