← Database

CVE-2004-1428

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames.

Affected Platforms

Argosoft Ftp Server

Weakness Type

CWE-203

References