CVE-2004-1602

ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.

• CWE-203

• http://marc.info/?l=bugtraq&m=109786760926133&w=2Third Party Advisory
• http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02Broken Link, Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1011687Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/11430Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17724Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=109786760926133&w=2Third Party Advisory
• http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02Broken Link, Exploit, Patch, Vendor Advisory
• http://securitytracker.com/id?1011687Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.securityfocus.com/bid/11430Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17724Third Party Advisory, VDB Entry

Published

Oct 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1596The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d al…
• CVE-2004-1597RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows…
• CVE-2004-1598Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers …
• CVE-2004-1599Cross-site scripting (XSS) vulnerability in index.php in Coo…
• CVE-2004-1600index.php in CoolPHP 1.0-stable allows remote attackers to g…
• CVE-2004-1601Directory traversal vulnerability in index.php in CoolPHP 1.…
• CVE-2004-1603cPanel 9.4.1-RELEASE-64 follows hard links, which allows loc…5.5
• CVE-2004-1604cPanel 9.9.1-RELEASE-3 allows remote authenticated users to …
• CVE-2004-1605SalesLogix 6.1 allows remote attackers to bypass authenticat…
• CVE-2004-1606slxweb.dll in SalesLogix 6.1 allows remote attackers to caus…
• CVE-2004-1607slxweb.dll in SalesLogix 6.1 allows remote attackers to obta…
• CVE-2004-1608SQL injection vulnerability in SalesLogix 6.1 allows remote …