Vulnerability in Yabbforumsoftware Yet Another Bulletin Board

CVE-2004-0294

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

Affected products

Yabbforumsoftware Yet_another_bulletin_board — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID, Vendor Advisory)