CVE-2000-0409

Severity: low (CVSS 3.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-05-10 · updated 2026-06-16

Description

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.

Affected products

Netscape Communicator: 4.5, 4.6, 4.7, 4.51, 4.61, 4.72 (+1)

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html
http://www.securityfocus.com/bid/1201
http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html
http://www.securityfocus.com/bid/1201

Get alerted when CVE-2000-0409 or the next vulnerability affects your stack