CVE-2002-1064: T. Hauck Jana Web Server

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.

Affected products

• T. Hauck Jana Web Server: version 1.0 only; version 1.45 only; version 1.46 only; version 2.0 only; version 2.0_beta1 only; version 2.0_beta2 only; …

Published 2002-10-04. Last modified 2026-06-16.