Description
BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.
References
- 2162 third-party-advisory
- 20070116 Re: Remedy Action Request System 5.01.02 - User Enumeration mailing-list
- http://www.alighieri.org/advisories/advisory-remedy50102.txt
- 22066 vdb-entry
- 1017515 vdb-entry
- 20070115 Remedy Action Request System 5.01.02 - User Enumeration mailing-list
- ADV-2007-0204 vdb-entry
- 23775 third-party-advisory
- 31658 vdb-entry
- rars-login-information-disclosure(31527) vdb-entry