CVE-2000-1002

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid...

5.0 MediumPublic exploit

CVE-2000-1002 is a medium vulnerability (CVSS 5.0) in Stalker Communigate Pro, published December 11, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.49%, the 94th percentile. No source names a fixed version.

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks.

Exploit likelihood

7.49%Up 6.4 points since Jan 1, 2023

What each source reports

NVD Score used 5.0

Record: CVE-2000-1002
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2000-1002
Updated: 2026-11-02

EUVDEUVD-2000-0989 No score

Record: EUVD-2000-0989
Updated: 2026-11-03

GitHub AdvisoriesGHSA-95jw-8pwr-6x64 No score

POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid...

Record: GHSA-95jw-8pwr-6x64
Updated: 2026-11-02

Affected products

stalker communigate pro

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PragmaSys TelnetServer 2000 - rexec Buffer Overflow	2000-08-24

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD