PT-2000-1456 · Microsoft · Internet Explorer

Published 2000-06-05 · Updated 2021-07-22 · CVE-2000-0519

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 4.x through 5.x

Description The issue arises when Internet Explorer does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.

Recommendations For Internet Explorer versions 4.x through 5.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0519

Affected Products

Internet Explorer

References · 6

• http://cert.org/advisories/CA-2000-10.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2000-0519 · Security Note
• http://securityfocus.com/bid/1309 · Vendor Advisory
• http://acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4627 · Note