CVE-2000-0406

Опубликовано: 10 мая 2000

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.

Ссылки

http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
http://www.cert.org/advisories/CA-2000-05.html
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-028.html
http://www.securityfocus.com/bid/1188
http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
http://www.cert.org/advisories/CA-2000-05.html
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-028.html
http://www.securityfocus.com/bid/1188

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00744

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2000-0406

redhat

около 25 лет назад

GHSA-4x6c-6ppx-5vjq

github

около 3 лет назад