oh well, being able to enumerate user accounts is still a "main goal" of null sessions, since it makes brute-forcing quite easy (`specially if you have weak passes)
Nevertheless, "patching" can be...