CVE-2004-1602
NoneCVSS
—
EPSS
30.7%
Published
Oct 15, 2004
CISA due date
—
The record
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-47379 NocoDB is software for building databases as spreadsheets. CWE-203
- CVE-2026-56316 Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS… CWE-203
- CVE-2026-56319 Capgo before 12.128.2 contains an information disclosure vulnerability in the GET… CWE-203
- CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that… CWE-203
- GHSA-qhxg-623c-cfjm NocoDB: Plaintext Password Comparison in Shared Views CWE-203
- CVE-2026-11289 Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed… CWE-203
- CVE-2026-11284 Side-channel information leakage in PerformanceAPIs in Google Chrome prior to… CWE-203
- CVE-2026-45294 FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. CWE-203