Unscored CVE-2005-1133 EUVD-2005-1136GHSA-j238-9q39-h4gr

The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determ…

Published Apr 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.

References

20050414 Enumeration of AS/400 users and their status via POP3 mailing-list
13156 vdb-entry