CVE-2000-0409 Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
LowCVSS 3.7
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
References
- 20000510 Possible symlink problems with Netscape 4.73 mailing-list
- 1201 vdb-entry