CVE-2004-1105 - Dowerless Coats

Description

Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid which could allow remote attackers to gain sensitive information.

Reference

http://www.securityfocus.com/bid/11623 http://www.kb.cert.org/vuls/id/830214 http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html http://www.nii.co.in/vuln/contivity.html http://www.kb.cert.org/vuls/id/CRDY-626N7F https://exchange.xforce.ibmcloud.com/vulnerabilities/17988