CVE-2000-0406

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-05-10 · updated 2026-06-16

Description

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.

Affected products

Netscape Communicator: 4.0, 4.05, 4.5, 4.5_beta, 4.06, 4.6 (+5)

References

http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
http://www.cert.org/advisories/CA-2000-05.html
http://www.redhat.com/support/errata/RHSA-2000-028.html
http://www.securityfocus.com/bid/1188
http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt
http://www.cert.org/advisories/CA-2000-05.html
http://www.redhat.com/support/errata/RHSA-2000-028.html
http://www.securityfocus.com/bid/1188

Get alerted when CVE-2000-0406 or the next vulnerability affects your stack