Description
Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
References
- 3991 vdb-entry
- 20020131 Script for find domino mailing-list
- 20020130 Enumerating users on a Domino webserver mailing-list
- lotus-domino-username-disclosure(8038) vdb-entry