CVE-2003-0343: BlackMoon FTP Server 2.6 Free Edition, and possibly other distributions and versions, generates an "Account...

Security readout for executives and security teams

This flaw leaks whether an FTP account name exists. By removing guesswork from username discovery, it can make password attacks against old BlackMoon FTP installations easier. It is not described as direct compromise by itself, but it raises risk where FTP is internet-facing or uses weak passwords. Exposure is most likely in legacy environments still running BlackMoon FTP Server 2.6 Free Edition, especially if reachable from the internet or untrusted networks. Evidence for other affected versions is uncertain because the CVE says only “possibly” other distributions and versions. Treat this as a moderate legacy exposure issue. It does not appear to be an emergency based on the supplied evidence, but internet-facing FTP with weak passwords could turn this into a practical intrusion path. Prioritize discovery and containment of exposed legacy instances. Mitigation focus: Identify and retire BlackMoon FTP Server 2.6 Free Edition where possible.; Restrict FTP access to trusted networks or VPN until vendor guidance is confirmed.; Enforce strong, unique passwords and account lockout or rate limiting if supported..

Prepared

Jun 30, 2026, 10:42 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.