NetSight
medium5.0

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows rem…

Impact

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected products

VendorProductAffected versions
WoppowarePostmaster
Version 4.2.2

Weakness classification

References