525
Reference Description
https://www.cve.org/CVERecord?id=CVE-2005-1650
CVE-2004-0294 Bulletin Board displays different error messages when a user exists or not,
which makes it easier for remote attackers to identify valid users and conduct a
brute force password guessing attack.
https://www.cve.org/CVERecord?id=CVE-2004-0294
CVE-2004-0243 Operating System, when direct remote login is disabled, displays a different
message if the password is correct, which allows remote attackers to guess
the password via brute force methods.
https://www.cve.org/CVERecord?id=CVE-2004-0243
CVE-2002-0514 Product allows remote attackers to determine if a port is being filtered because
the response packet TTL is different than the default TTL.
https://www.cve.org/CVERecord?id=CVE-2002-0514
CVE-2002-0515 Product sets a different TTL when a port is being filtered than when it is
not being filtered, which allows remote attackers to identify filtered ports by
comparing TTLs.
https://www.cve.org/CVERecord?id=CVE-2002-0515
CVE-2001-1387 Product may generate different responses than specified by the administrator,
possibly leading to an information leak.
https://www.cve.org/CVERecord?id=CVE-2001-1387
CVE-2004-0778 Version control system allows remote attackers to determine the existence of
arbitrary files and directories via the -X command for an alternate history file,
which causes different error messages to be returned.
https://www.cve.org/CVERecord?id=CVE-2004-0778
CVE-2004-1428 FTP server generates an error message if the user name does not exist
instead of prompting for a password, which allows remote attackers to
determine valid usernames.
https://www.cve.org/CVERecord?id=CVE-2004-1428
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 967 SFP Secondary Cluster: State Disclosure 888 2403
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
Notes
Relationship
can overlap errors related to escalated privileges
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Response discrepancy infoleak
Related Attack Patterns
CAPEC-ID Attack Pattern Name
331 ICMP IP Total Length Field Probe
332 ICMP IP 'ID' Field Error Message Probe
541 Application Fingerprinting
580 System Footprinting
References
CWE Version 4.14
CWE-205: Observable Behavioral Discrepancy
CWE-205: Observable Behavioral Discrepancy