CVE-2000-1002 POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the....
MediumCVSS 5.0
EPSS 7.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stalker communigate pro | = 3.3.2 | No fix listed |
References
- communigate-email-verify(5363) vdb-entry
- 1792 exploit vdb-entry vendor-advisory
- 20001012 Re: Netscape Messaging server 4.15 poor error strings mailing-list vendor-advisory