296,334
Total vulnerabilities in the database
The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.
| Software | From | Fixed in |
|---|---|---|
| watchguard / firebox_pptp_vpn | 5.0 | 5.0.x |
| watchguard / firebox_pptp_vpn | 4.9 | 4.9.x |