CVE:CVE-2007-2999
CNNVD:CNNVD-200706-012
当对用户账户登录设置的时间限制被启用时，Microsoft Windows Server 2003会根据账户是否有效来生成不同的错误信息，这使得见机行事的攻击者可以猜测出有效的Active Directory账户名。
solution:Upgrade microsoft windows_2003_server to a higher version than gold,sp1,sp2,and avoid the version gold,sp1,sp2
solution:Upgrade cisco wireless_lan_controller_software to a higher version than 3.2.171.5,4.0.206.0,4.1.171.0,and avoid the version [3.2,3.2.171.5),[4.0,4.0.206.0),[4.1,4.1.171.0)