Description
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
References
- http://www.infobyte.com.ar/adv/ISR-04.html
- 20050315 [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability mailing-list
- 12811 vdb-entry
- 14607 third-party-advisory