CVE-2000-1002: POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versu...

Security readout for executives and security teams

This issue lets an outside party tell whether an email address exists on a Stalker CommuniGate Pro 3.3.2 server by comparing POP3 login error messages. It is not described as account takeover or code execution, but it can expose valid addresses for spam, phishing targeting, and reconnaissance. Exposure is most likely where legacy CommuniGate Pro 3.3.2 POP3 remains reachable from the internet or untrusted networks. The provided affected metadata is incomplete, so teams should not assume other versions are affected without vendor or asset evidence. Prioritize based on whether this legacy POP3 service exists in your environment. If present and public-facing, remediate promptly to reduce address harvesting and phishing preparation risk. If absent, document non-exposure and no urgent action is indicated. Mitigation focus: Check whether CommuniGate Pro 3.3.2 POP3 is still deployed.; Review vendor guidance for supported upgrades or configuration changes.; Restrict POP3 access to trusted networks where business allows..

Prepared

Jul 11, 2026, 23:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.