CVE-2000-1002

{"id": "CVE-2000-1002", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2000-12-11T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/139523", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/1792", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5363", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/139523", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/1792", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5363", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks."}, {"lang": "es", "value": "El demonio POP3 en Stalker CommuniGate Pro 3.3.2 genera distintos mensajes de error para nombres de usuario inv\u00e1lidos frente a contrase\u00f1as inv\u00e1lidas, lo que permite a atacantes remotos determinar direcciones de correo electr\u00f3nico v\u00e1lidas en el servidor para ataques de correo no deseado."}], "lastModified": "2026-09-23T13:10:00.153", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:stalker:communigate_pro:3.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E4802FD-52E5-4A8B-8AAB-4536A4A8AC4A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}