CVE-2000-0087

Published Jun 25, 2002 CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Description
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2000-0086 Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 5:05 AM
Reserved
Jan 22, 2000, 12:00 AM
Status
Modified
Published
Jan 12, 2000, 5:00 AM
Modified
Jun 16, 2026, 9:50 PM