CVE-2000-0960

Published Dec 19, 2000 netscape

Overview

CVE-2000-0960 is a known-severity vulnerability affecting netscape messaging_server. It was published on December 19, 2000.

Technical Description

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.

Remediation

Check the references section for vendor advisories and patches from netscape. Update messaging_server to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref marc.info/?l=bugtraq&m=97138100426121&w=2 Ref www.securityfocus.com/bid/1787 Ref exchange.xforce.ibmcloud.com/vulnerabilities/5364 Ref marc.info/?l=bugtraq&m=97138100426121&w=2 Ref www.securityfocus.com/bid/1787 Ref exchange.xforce.ibmcloud.com/vulnerabilities/5364

Frequently Asked Questions

What is CVE-2000-0960?

CVE-2000-0960 is a known-severity vulnerability affecting netscape messaging_server. It was published on December 19, 2000.

How severe is CVE-2000-0960?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2000-0960?

How can CyberStrike help with CVE-2000-0960?

CyberStrike's AI-powered security agents can automatically detect CVE-2000-0960 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.