Vulnerability in Woppoware Postmaster

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

Affected products

Woppoware Postmaster — versions 4.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

References

cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)