Test ID:	1.3.6.1.4.1.25623.1.0.15484
Category:	FTP
Title:	ProFTPD < 1.2.11 Remote User Enumeration
Summary:	The remote ProFTPD server is as old or older than 1.2.10
Description:	Summary: The remote ProFTPD server is as old or older than 1.2.10 Vulnerability Insight: It is possible to determine which user names are valid on the remote host based on timing analysis attack of the login procedure. Vulnerability Impact: An attacker may use this flaw to set up a list of valid usernames for a more efficient brute-force attack against the remote host. Solution: Upgrade to a newer version CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1602 BugTraq ID: 11430 http://www.securityfocus.com/bid/11430 Bugtraq: 20041015 ProFTPD 1.2.x remote users enumeration bug (Google Search) http://marc.info/?l=bugtraq&m=109786760926133&w=2 http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02 http://securitytracker.com/id?1011687 XForce ISS Database: proftpd-info-disclosure(17724) https://exchange.xforce.ibmcloud.com/vulnerabilities/17724
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.