CVE-2000-0034

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00354.6resend command in Majordomo allows local users to gain privileges via shell metacharacters.CVE-2000-00365.0Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.CVE-2000-00374.6Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.CVE-2000-00387.5glFtpD includes a default glftpd user account with a default password and a UID of 0.CVE-2000-00395.0AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.CVE-2000-004010.0glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.CVE-2000-00415.0Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attackCVE-2000-004210.0Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.CVE-2000-00437.5Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.CVE-2000-004410.0Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.CVE-2000-00456.4MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.CVE-2000-00467.5Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message.
CVE-2000-0034: Medium severity, CVSS 5.0 | Vulnix