CVE-2000-0960

MEDIUM 5.0CVE-2000-0960 · Published 19/12/2000 · updated 23/09/2026

In short

CVE-2000-0960 is a MEDIUM (CVSS 5.0) vulnerability affecting messaging server (netscape).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
messaging server netscape	`= 4.15`	No fix yet

Description

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.

References

marc.info
securityfocus.com/bid/1787 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/5364

More vulnerabilities in messaging server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free