CVE-2000-0409

LowCVSS 3.7/10Last modified Jun 16, 2026

Description

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.

Metrics

CVSS 2.0 3.7/10AV:L/AC:H/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-04105.0ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file thatCVE-2000-04115.0Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.CVE-2000-04127.5The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitCVE-2000-04135.0The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,CVE-2000-04144.6Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.CVE-2000-04155.0Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attaCVE-2000-04165.0NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.CVE-2000-04175.0The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username oCVE-2000-04185.0The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.CVE-2000-04197.5The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via tCVE-2000-04207.2The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and CVE-2000-04217.5The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0409: Low severity, CVSS 3.7 | Vulnix