Description
The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
Published May 18, 2005 · Updated Sep 17, 2024 · Assigned by mitre