ID de Prueba:	1.3.6.1.4.1.25623.1.0.15484
Categoría:	FTP
Título:	ProFTPD < 1.2.11 Remote User Enumeration
Resumen:	The remote ProFTPD server is as old or older than 1.2.10
Descripción:	Summary: The remote ProFTPD server is as old or older than 1.2.10 Vulnerability Insight: It is possible to determine which user names are valid on the remote host based on timing analysis attack of the login procedure. Vulnerability Impact: An attacker may use this flaw to set up a list of valid usernames for a more efficient brute-force attack against the remote host. Solution: Upgrade to a newer version CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1602 BugTraq ID: 11430 http://www.securityfocus.com/bid/11430 Bugtraq: 20041015 ProFTPD 1.2.x remote users enumeration bug (Google Search) http://marc.info/?l=bugtraq&m=109786760926133&w=2 http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 http://securitytracker.com/id?1011687 XForce ISS Database: proftpd-info-disclosure(17724) https://exchange.xforce.ibmcloud.com/vulnerabilities/17724
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.