The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on t…
Info
Summary
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- http://marc.info/?l=bugtraq&m=97138100426121&w=2
- http://www.securityfocus.com/bid/1787 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5364
- http://marc.info/?l=bugtraq&m=97138100426121&w=2
- http://www.securityfocus.com/bid/1787 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5364
Timeline
- nvd_ingest NVD