CVE-2000-0517 Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote at...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
References
- CA-2000-08 patch third-party-advisory us-government-resource
- 1260 patch vdb-entry vendor-advisory
- netscape-ssl-certificate(4550) vdb-entry