CVE-2000-0518

Опубликовано: 05 июн. 2000

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.

Ссылки

http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
http://www.cert.org/advisories/CA-2000-10.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1309
Patch
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
https://exchange.xforce.ibmcloud.com/vulnerabilities/4624
http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
http://www.cert.org/advisories/CA-2000-10.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1309
Patch
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
https://exchange.xforce.ibmcloud.com/vulnerabilities/4624

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*

cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*

cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*

cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*

cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*

cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02187

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g344-mjvh-jcp5

github

почти 4 года назад