CVE-2000-0087 Weak cryptography in n/a
Remote attackers can sniff plaintext credentials because the mail notification utility ignores SSL preferences, exposing usernames and passwords.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-0087?
CVE-2000-0087 is a medium-severity vulnerability in n/a, published on 25 Jun 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Which versions are affected by CVE-2000-0087?
It affects 2 products.
Products include Netscape Communicator, Netscape Navigator.
How do I fix CVE-2000-0087?
No fix has been published for CVE-2000-0087 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-0087 being exploited?
There is no known exploitation of CVE-2000-0087 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2002-2248 Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbi
- CVE-1999-1189 Memory corruption in n/a
- CVE-2001-0596 Cross-site scripting in n/a
- CVE-1999-1357 Cross-site scripting in n/a
- CVE-2000-1187 Memory corruption in n/a
Sources
Also known as GHSA-2pg3-3pf8-92c8.