CVE:CVE-2006-2354
CNNVD:CNNVD-200605-272
Ipswitch WhatsUp Professional 2006和Ipswitch WhatsUp Professional 2006 Premium中的NmConsole/Login.asp产生不同出错信息的方式能使远程攻击者枚举有效用户名。
solution:Upgrade ipswitch whatsup_professional to a higher version than 2006,2006_premium,and avoid the version 2006,2006_premium