low2.6
CVE-2000-0406
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by r…
Impact
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Communicator | Versions 4.0, 4.05, 4.5, 4.5_beta, 4.06, 4.6 |
References
- NVD record
- CVE.org record
- http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
- http://www.cert.org/advisories/CA-2000-05.html
- http://www.redhat.com/support/errata/RHSA-2000-028.html
- http://www.securityfocus.com/bid/1188
- http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
- http://www.cert.org/advisories/CA-2000-05.html
- http://www.redhat.com/support/errata/RHSA-2000-028.html
- http://www.securityfocus.com/bid/1188