← Database

CVE-1999-1266

MEDIUM CVSS: 5.0 Published: 1997-06-13 Modified: 2026-06-16

Description

rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.

Affected Platforms

Metamail Corporation Metamail

Weakness Type

NVD-CWE-Other

References