CVE-2004-1602

CVE-2004-1602

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 31%
from disclosure to weaponsame day
Published on NVDFeb 20
1st PoCOct 17
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.