2001-09-12 04:00:00
mitre
PUBLISHED
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system.