CVE Vulnerabilities

CVE-2000-0517

Published: May 26, 2000 | Modified: Oct 10, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site’s DNS information.

Affected Software

Name Vendor Start Version End Version
Communicator Netscape 4.0 4.0
Communicator Netscape 4.5 4.5
Communicator Netscape 4.6 4.6
Communicator Netscape 4.7 4.7
Communicator Netscape 4.51 4.51
Communicator Netscape 4.61 4.61
Communicator Netscape 4.72 4.72
Communicator Netscape 4.73 4.73

References