CVE-2000-0960

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-19 · updated 2026-09-23

Description

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.

Affected products

Netscape Messaging Server: 4.15, 4.15-patch1, 4.15-patch2

References

http://marc.info/?l=bugtraq&m=97138100426121&w=2
http://www.securityfocus.com/bid/1787
https://exchange.xforce.ibmcloud.com/vulnerabilities/5364
http://marc.info/?l=bugtraq&m=97138100426121&w=2
http://www.securityfocus.com/bid/1787
https://exchange.xforce.ibmcloud.com/vulnerabilities/5364

Get alerted when CVE-2000-0960 or the next vulnerability affects your stack