CVE-2000-0960 | BDVDB-2026-1934 Detail

Description#

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/1787
http://marc.info/?l=bugtraq&m=97138100426121&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/5364

Exploit#

No public exploit known

History#

Version 12001-01-22Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.