Security Advisory
CVE-2002-1064
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.