PT-2000-1348 · Netscape · Netscape Communicator+1

Publicado 2000-05-10 · Atualizado 2008-09-10 · CVE-2000-0406

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netscape Communicator versions prior to 4.73 Netscape Navigator version 4.07

Description The issue allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server. This is due to the improper validation of SSL certificates.

Recommendations For Netscape Communicator versions prior to 4.73, update to version 4.73 or later to resolve the issue. For Netscape Navigator version 4.07, consider disabling SSL connections until a patch is available.

Correção

Identificadores relacionados

CVE-2000-0406

Produtos afetados

Netscape Communicator

Netscape Navigator

Referências · 5

• http://cert.org/advisories/CA-2000-05.html · Nota
• http://securityfocus.com/bid/1188 · Nota
• http://redhat.com/support/errata/RHSA-2000-028.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0406 · Nota de Segurança
• http://acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt · Nota