CVE-2000-0519: Low severity Microsoft ie vulnerability
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0519?
CVE-2000-0519 is considered a moderate severity vulnerability due to its potential to allow attackers to bypass SSL certificate validation.
How do I fix CVE-2000-0519?
To address CVE-2000-0519, you should upgrade to a newer, supported version of Internet Explorer that properly handles SSL certificate validation.
What software versions are affected by CVE-2000-0519?
CVE-2000-0519 affects Internet Explorer versions 4.x and 5.x on various Windows operating systems including Windows 95, Windows 98, Windows NT, and Windows 2000.
What exploitation methods are associated with CVE-2000-0519?
Exploitation of CVE-2000-0519 could allow a malicious server to present an invalid SSL certificate after a valid session has already been established.
Are there any workarounds for CVE-2000-0519?
As a workaround for CVE-2000-0519, users can use alternative browsers that do not have this vulnerability until they can update Internet Explorer.