low3.7Public exploit code
CVE-2000-0409
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netscape Communicator 4.5/4.51/4.6/4.61/4.7/4.72/4.73 - '/tmp' Symlink2000-05-10 · local · multiple · Verified
Impact
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netscape | Communicator | Versions 4.5, 4.6, 4.7, 4.51, 4.61, 4.72 |