Description
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
References
- 20001030 Samba 2.0.7 SWAT vulnerabilities mailing-list
- samba-swat-brute-force(5442) vdb-entry