system
Describe <CVE-2008-1166>.
user
What is <CVE-2008-1166>?
assistant
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames..