CVE-2000-1237

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-12-31

Last modified

2024-09-16

Affected products

• Ftgate (Floosietek)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html
• http://www.iss.net/security_center/static/4793.php