CVE-2000-0960

{"id": "CVE-2000-0960", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2000-12-19T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=97138100426121&w=2", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1787", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5364", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=97138100426121&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/1787", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5364", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse."}, {"lang": "es", "value": "El servidor POP3 en Netscape Messaging Server 4.15p1 genera mensajes de error diferentes para nombres de usuario incorrectos frente a contrase\u00f1as incorrectas, lo que permite a atacantes remotos determinar usuarios v\u00e1lidos en el sistema y recolectar direcciones de correo electr\u00f3nico para abuso de correo no deseado."}], "lastModified": "2026-09-23T13:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netscape:messaging_server:4.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294BA50A-A19B-46F8-8D9E-4F0DA98F74E5"}, {"criteria": "cpe:2.3:a:netscape:messaging_server:4.15:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41AD2442-625E-4654-8654-0BF345FAC3B7"}, {"criteria": "cpe:2.3:a:netscape:messaging_server:4.15:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32228CBD-0C64-40B9-85A8-6925FDEEC89F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}