CVE-2000-0087

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00887.2Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka th CVE-2000-00892.1The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi CVE-2000-00903.6VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.CVE-2000-009110.0Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor CVE-2000-00926.2The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-009310.0An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.CVE-2000-00947.2procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for CVE-2000-00955.0The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to CVE-2000-00967.2Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-00975.0The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu CVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t CVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.