CVE-2000-0087: Medium severity Netscape Navigator vulnerability
Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Netscape Mail Notification (nsnotify)from your environment.Disable or uninstall the Netscape Mail Notification (nsnotify) utility in Netscape Communicator to prevent it from performing IMAP authentication in plaintext until an official fix is available.
- Compensating control
Restrict network exposure of IMAP traffic from hosts running nsnotify: block or filter outbound IMAP (TCP port 143) at the network/firewall, restrict access to IMAP servers to trusted IP ranges, or require a VPN/tunneled connection to prevent credential sniffing.
- Operational
Change/rotate usernames and passwords for any mail accounts that may have been accessed by nsnotify, since credentials may have been exposed in plaintext.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0087?
The severity of CVE-2000-0087 is considered moderate due to the potential for sensitive information leakage.
How do I fix CVE-2000-0087?
To fix CVE-2000-0087, ensure that SSL is enforced for IMAP connections in your Netscape Communicator settings.
What software is affected by CVE-2000-0087?
CVE-2000-0087 affects Netscape Communicator version 4.7 and Netscape Navigator.
What type of attack can exploit CVE-2000-0087?
CVE-2000-0087 can be exploited by sniffing plaintext usernames and passwords over an unencrypted IMAP connection.
Is CVE-2000-0087 still a concern today?
While CVE-2000-0087 was relevant in its time, modern security practices and software versions have largely mitigated its impact.