Unscored CVE-2000-1030 EUVD-2000-1017GHSA-2qm3-6pw4-478j

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers …

Published Nov 29, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

References

corporatetime-brute-force(5529) vdb-entry
20001031 Re: Samba 2.0.7 SWAT vulnerabilities mailing-list
1888 vdb-entry