Floosietek FTGate Mail Server Vulnerability

If invalid user login information is requested the FTGate mail server will display an error message but never drop the connection. This enables an attacker to bruteforce usernames and passwords.


 

Privacy Statement
Copyright 2010, SecurityFocus