CVE-2000-0676 Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp"....
MediumCVSS 5.0
EPSS 20.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.04 | No fix listed |
| netscape communicator | = 4.05 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.5_beta | No fix listed |
| netscape communicator | = 4.06 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.07 | No fix listed |
| netscape communicator | = 4.08 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
| netscape communicator | = 4.74 | No fix listed |
References
- 20000804 Dangerous Java/Netscape Security Hole mailing-list
- 20000810 MDKSA-2000:033 Netscape Java vulnerability mailing-list
- 20000818 Conectiva Linux Security Announcement - netscape mailing-list
- 20000821 MDKSA-2000:036 - netscape update mailing-list
- CSSA-2000-027.1 vendor-advisory
- CA-2000-15 patch third-party-advisory us-government-resource
- 20000823 Security Hole in Netscape, Versions 4.x, possibly others vendor-advisory
- RHSA-2000:054 vendor-advisory
- 1546 exploit patch vdb-entry vendor-advisory