PT-2000-1351 · Netscape · Netscape

Published 2000-05-10 · Updated 2008-09-10 · CVE-2000-0409

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netscape versions 4.73 and earlier

Description The issue allows local users to overwrite files of the user importing the certificate because Netscape follows symlinks when it imports a new certificate.

Recommendations For Netscape versions 4.73 and earlier, avoid importing certificates from untrusted sources until a fix is available. As a temporary workaround, consider setting appropriate permissions on sensitive files to prevent unauthorized overwriting.

Exploit

Fix

Related Identifiers

CVE-2000-0409

Affected Products

Netscape

References · 4

• 🔥 https://exploit-db.com/exploits/19912 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0409 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html · Note
• http://securityfocus.com/bid/1201 · Note