CVE-2000-0409: Low severity Netscape Communicator vulnerability
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Netscape Communicatorfrom your environment.Uninstall Netscape Communicator from affected systems or otherwise prevent its use until an official fix is available.
- Compensating control
Prevent unprivileged local users from importing certificates or running the application that performs certificate imports. Restrict local login and execution of Netscape Communicator to trusted administrators and enforce filesystem permissions to reduce the risk of symlink-based overwrites.
- Operational
Audit systems for files that may have been overwritten via certificate import symlink attacks (check user home directories and application files) and restore any affected files from trusted backups.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0409?
CVE-2000-0409 is classified as a medium severity vulnerability due to the potential for unauthorized file overwriting.
How do I fix CVE-2000-0409?
To fix CVE-2000-0409, ensure that you upgrade to a later version of Netscape that does not have this vulnerability.
Who is affected by CVE-2000-0409?
CVE-2000-0409 affects local users of Netscape Communicator versions 4.73 and earlier.
What are the risks associated with CVE-2000-0409?
The risks associated with CVE-2000-0409 include unauthorized access to overwrite sensitive files by local users.
Is there a workaround for CVE-2000-0409?
A workaround for CVE-2000-0409 is to restrict local user access to the Netscape certificate import function until a fix is applied.