Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
References
Link | Resource |
---|---|
http://www.cert.org/advisories/CA-2000-08.html | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/1260 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/4550 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-05-25 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2000-0517
Mitre link : CVE-2000-0517
JSON object : View
CWE
Products Affected
netscape
- communicator