CVE-2007-0195

Currently unrated

Key Information:

Vendor
F5
Status
Firepass
Vendor
CVE Published:
12 January 2007

Summary

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

References

https://tech.f5.com/home/solutions/sol6923.html
x_refsource_CONFIRM
http://www.mnin.org/advisories/2007_firepass.pdf
x_refsource_MISC
http://www.osvdb.org/32736
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.