First published: Thu Jul 12 2007(Updated: )
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HP OpenVMS | =8.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.