medium5.0Public exploit code
CVE-2000-1002
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PragmaSys TelnetServer 2000 - rexec Buffer Overflow2000-08-24 · dos · windows · Verified
Impact
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stalker | Communigate Pro | Version 3.3.2 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/139523
- http://www.securityfocus.com/bid/1792
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5363
- http://www.securityfocus.com/archive/1/139523
- http://www.securityfocus.com/bid/1792
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5363