The web mail service in Woppoware PostMaster 4.2.2 (build 3.2.5) generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
| Software | From | Fixed in |
|---|---|---|
| woppoware / postmaster | 4.2.2 | 4.2.2.x |