CVE-2000-0982: High severity Microsoft Internet Explorer vulnerability

Published Dec 19, 2000

Updated

Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.

Affected Software

5 affected components

Microsoft Internet Explorer=5.01

Microsoft Internet Explorer=4.0

Microsoft Internet Explorer=4.0.1

Microsoft Internet Explorer=4.1

Microsoft Internet Explorer=5.0

Remediation

Patch Available

http://www.securityfocus.com/bid/1793

Event History

Dec 19, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0982?

CVE-2000-0982 is considered a medium severity vulnerability due to the risk of credential leakage.

How do I fix CVE-2000-0982?

To fix CVE-2000-0982, users should upgrade to Internet Explorer version 5.5 or later, or switch to a different browser.

What systems are affected by CVE-2000-0982?

CVE-2000-0982 affects Internet Explorer versions 4.0, 4.0.1, 4.1, and 5.0, specifically prior to version 5.5.

What type of attack does CVE-2000-0982 enable?

CVE-2000-0982 enables remote attackers to capture cached user credentials by monitoring insecure connections.

Is CVE-2000-0982 still a concern today?

While CVE-2000-0982 primarily affects outdated versions of Internet Explorer, it is important to avoid using vulnerable software.