Description
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.
References
- 19970613 rshd gives away usernames mailing-list
- rsh-username-leaks(1660) vdb-entry