PT-2000-1351 · Netscape · Netscape

Publicado 2000-05-10 · Atualizado 2008-09-10 · CVE-2000-0409

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netscape versions 4.73 and earlier

Description The issue allows local users to overwrite files of the user importing the certificate because Netscape follows symlinks when it imports a new certificate.

Recommendations For Netscape versions 4.73 and earlier, avoid importing certificates from untrusted sources until a fix is available. As a temporary workaround, consider setting appropriate permissions on sensitive files to prevent unauthorized overwriting.

Exploit

Correção

Identificadores relacionados

CVE-2000-0409

Produtos afetados

Netscape

Referências · 4

• 🔥 https://exploit-db.com/exploits/19912 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0409 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html · Nota
• http://securityfocus.com/bid/1201 · Nota