CVE-2000-0517

Опубликовано: 26 мая 2000

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.

Ссылки

http://www.cert.org/advisories/CA-2000-08.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1260
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4550
http://www.cert.org/advisories/CA-2000-08.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1260
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4550

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*

cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00954

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h63x-8w34-4hj2

github

почти 4 года назад