Description
FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.
References
- MS01-026 vendor-advisory
- iis-ftp-domain-authentication(6545) vdb-entry
- 2719 vdb-entry