CVE-2000-0406 Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web....
LowCVSS 2.6
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.05 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.5_beta | No fix listed |
| netscape communicator | = 4.06 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.07 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
References
- www.acrossecurity.com
- CA-2000-05 third-party-advisory us-government-resource
- RHSA-2000:028 vendor-advisory
- 1188 vdb-entry