Description
BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://securityreason.com/securityalert/2162 ↗
- http://www.securityfocus.com/archive/1/457078/100/0/threaded ↗
- http://www.alighieri.org/advisories/advisory-remedy50102.txt ↗
- http://www.securityfocus.com/bid/22066 ↗
- http://securitytracker.com/id?1017515 ↗
- http://www.securityfocus.com/archive/1/456949/100/0/threaded ↗
- http://www.vupen.com/english/advisories/2007/0204 ↗
- http://secunia.com/advisories/23775 ↗
- http://osvdb.org/31658 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31527 ↗