CVE-2005-4673: Inicom Networks Ioftpd

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames.

Affected products

• Inicom Networks Ioftpd: version 5.8.4u only

Published 2005-12-31. Last modified 2026-06-16.