CVE-2000-1237 in FTGate

Résumé

par MITRE

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 14/07/2005
• Divulgation: 31/12/2000
• Modérer: accepté
• Entrée: VDB-16222
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00346
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-1237
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-1237
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-1237/