Recognising the attack and its cause

An RSA server returns a different error message depending on whether the PKCS#1 v1.5 padding of a decryption is valid or not. By sending thousands of "tampered" ciphertexts and observing these responses, an attacker eventually decrypts a message without possessing the private key. Which attack is this, and what is its cause?