Netscape Messaging Server Email Address Verification Vulnerability

Bugtraq ID:	1787
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Oct 11 2000 12:00AM
Updated:	Oct 11 2000 12:00AM
Credit:	Posted to Bugtraq on October 11, 2000 by Matt Holtz <[email protected]>.
Vulnerable:	Netscape Messaging Server 4.15 p2 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d - HP HP-UX 11.0 - IBM AIX 4.3.2 - Microsoft Windows NT 4.0 - Redhat Linux 7.0 - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Sun Solaris 2.6 Netscape Messaging Server 4.15 p1 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d - HP HP-UX 11.0 - IBM AIX 4.3.2 - Microsoft Windows NT 4.0 - Redhat Linux 7.0 - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Sun Solaris 2.6 Netscape Messaging Server 4.15 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d - HP HP-UX 11.0 - IBM AIX 4.3.2 - Microsoft Windows NT 4.0 - Redhat Linux 7.0 - Redhat Linux 6.2 sparc - Redhat Linux 6.2 i386 - Redhat Linux 6.2 alpha - Sun Solaris 2.6
Not Vulnerable:

Netscape Messaging Server Email Address Verification Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].