2005-04-16 04:00:00
mitre
PUBLISHED
The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server.