CVE-2000-0087 Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacke...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.7 | No fix listed |
| netscape navigator | All versions | No fix listed |
References
- 20000113 Misleading sense of security in Netscape mailing-list
- netscape-mail-notify-plaintext(4385) vdb-entry