PT-2000-1348 · Netscape · Netscape Communicator+1

Published 2000-05-10 · Updated 2008-09-10 · CVE-2000-0406

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netscape Communicator versions prior to 4.73 Netscape Navigator version 4.07

Description The issue allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server. This is due to the improper validation of SSL certificates.

Recommendations For Netscape Communicator versions prior to 4.73, update to version 4.73 or later to resolve the issue. For Netscape Navigator version 4.07, consider disabling SSL connections until a patch is available.

Fix

Related Identifiers

CVE-2000-0406

Affected Products

Netscape Communicator

Netscape Navigator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0406 · Security Note
• http://cert.org/advisories/CA-2000-05.html · Note
• http://securityfocus.com/bid/1188 · Note
• http://redhat.com/support/errata/RHSA-2000-028.html · Note
• http://acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt · Note