CVE-2000-1237

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-12-31 · updated 2026-09-23

Description

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.

Affected products

Floosietek Ftgate: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html
http://www.iss.net/security_center/static/4793.php
http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html
http://www.iss.net/security_center/static/4793.php

Get alerted when CVE-2000-1237 or the next vulnerability affects your stack