CVEvulnerability
CVE-2000-1002
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2000-12-11
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Affected configurations
• stalker communigate pro 3.3.2
References
- http://www.securityfocus.com/archive/1/139523 Vendor Advisory
- http://www.securityfocus.com/bid/1792 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5363 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/archive/1/139523 Vendor Advisory
- http://www.securityfocus.com/bid/1792 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5363 exchange.xforce.ibmcloud.com