CVE-2002-1064 | BDVDB-2026-4685 Detail

Description#

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html
http://www.securityfocus.com/bid/5326
http://www.iss.net/security_center/static/9688.php

Exploit#

No public exploit known

History#

Version 12002-08-31Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.