CVE-2000-0087
MediumExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
The Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for SSL connections. This allows a remote attacker to sniff usernames and passwords in plaintext.
Risk Assessment
The organization is at risk of credential interception by remote attackers, potentially leading to unauthorized access to user accounts.
Recommendation
It is recommended to enforce SSL for IMAP connections and update the software to the latest version to mitigate the risk.
Original NVD description (English source)
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.