First published: Fri May 26 2000(Updated: )
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netscape Communicator | =4.61 | |
Netscape Communicator | =4.73 | |
Netscape Communicator | =4.51 | |
Netscape Communicator | =4.7 | |
Netscape Communicator | =4.0 | |
Netscape Communicator | =4.6 | |
Netscape Communicator | =4.72 | |
Netscape Communicator | =4.5 | |
=4.0 | ||
=4.5 | ||
=4.6 | ||
=4.7 | ||
=4.51 | ||
=4.61 | ||
=4.72 | ||
=4.73 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0517 is considered a moderate severity vulnerability due to its potential for allowing attackers to spoof legitimate websites.
To fix CVE-2000-0517, users should upgrade to a more secure version of Netscape that addresses this vulnerability.
CVE-2000-0517 affects Netscape versions 4.0 through 4.73, including all iterations of version 4.x.
CVE-2000-0517 can lead to users not being properly warned about invalid certificates, making them vulnerable to phishing attacks.
Yes, CVE-2000-0517 can be exploited remotely by attacking the DNS entries of a legitimate website.