T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
BID:5326
Info
T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
| Bugtraq ID: | 5326 |
| Class: | Design Error |
| CVE: |
CVE-2002-1064 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2002 12:00AM |
| Updated: | Jul 11 2009 02:56PM |
| Credit: | Discovered by 3APA3A <[email protected]>. |
| Vulnerable: |
T. Hauck Jana Webserver 2.2.1 T. Hauck Jana Webserver 2.0 Beta2 T. Hauck Jana Webserver 2.0 Beta1 T. Hauck Jana Webserver 2.0 T. Hauck Jana Webserver 1.46 T. Hauck Jana Webserver 1.45 T. Hauck Jana Webserver 1.0 |
| Not Vulnerable: | |
Discussion
T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
Jana Server is a server for Microsoft Windows based systems. Jana Server provides a wide range of proxy servers, and a number of other services. A POP3 gateway service is provided.
Reportedly, the Jana Server POP3 gateway returns error messages that distinguish between invalid usernames and invalid passwords. Exploitation of this vulnerability may aid an attacker in gathering information about the system or internal network.
Jana Server is a server for Microsoft Windows based systems. Jana Server provides a wide range of proxy servers, and a number of other services. A POP3 gateway service is provided.
Reportedly, the Jana Server POP3 gateway returns error messages that distinguish between invalid usernames and invalid passwords. Exploitation of this vulnerability may aid an attacker in gathering information about the system or internal network.
Exploit / POC
T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
T. Hauck Jana Server POP3 Gateway Username Enumeration Vulnerability
References:
References:
- Jana Webserver (Thomas Hauck)