CVE-2005-1650 in Woppoware PostMaster
Summary
The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Reservation
05/18/2005
Disclosure
05/18/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 25257 | Woppoware PostMaster Error Message cross site scripting | 80 | Not defined | Not defined | CVE-2005-1650 |