« Volver al listado

CVE-2000-0960

Estado: ModificadaMedia (5)—

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netscape — Messaging Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2000-0960",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2000-12-19T05:00:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=97138100426121&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/1787",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5364",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=97138100426121&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/1787",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5364",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse."
    },
    {
      "lang": "es",
      "value": "El servidor POP3 en Netscape Messaging Server 4.15p1 genera mensajes de error diferentes para nombres de usuario incorrectos frente a contraseñas incorrectas, lo que permite a atacantes remotos determinar usuarios válidos en el sistema y recolectar direcciones de correo electrónico para abuso de correo no deseado."
    }
  ],
  "lastModified": "2026-09-23T13:10:00.153",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netscape:messaging_server:4.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "294BA50A-A19B-46F8-8D9E-4F0DA98F74E5"
            },
            {
              "criteria": "cpe:2.3:a:netscape:messaging_server:4.15:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41AD2442-625E-4654-8654-0BF345FAC3B7"
            },
            {
              "criteria": "cpe:2.3:a:netscape:messaging_server:4.15:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32228CBD-0C64-40B9-85A8-6925FDEEC89F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}