← Database

CVE-2005-1650

MEDIUM CVSS: 5.0 Published: 2005-05-18 Modified: 2026-06-16

Description

The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected Platforms

Woppoware Postmaster

Weakness Type

CWE-203

References