2.6

CVE-2000-0519

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Ie Version4.0 Editionwindows_98
Microsoft ≫ Ie Version4.0 Editionwindows_nt
Microsoft ≫ Ie Version4.0.1 Editionwindows_95
Microsoft ≫ Ie Version4.0.1 Editionwindows_98
Microsoft ≫ Ie Version4.0.1 Editionwindows_nt
Microsoft ≫ Ie Version5.0 Editionwindows_2000
Microsoft ≫ Ie Version5.0 Editionwindows_95
Microsoft ≫ Ie Version5.0 Editionwindows_98
Microsoft ≫ Ie Version5.0 Editionwindows_nt_4.0
Microsoft ≫ Ie Version5.0.1 Editionwindows_2000
Microsoft ≫ Ie Version5.0.1 Editionwindows_95
Microsoft ≫ Ie Version5.0.1 Editionwindows_98
Microsoft ≫ Ie Version5.0.1 Editionwindows_nt_4.0
Microsoft ≫ Internet Explorer Version4.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.84% 0.909
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
http://www.cert.org/advisories/CA-2000-10.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1309
Patch
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
https://exchange.xforce.ibmcloud.com/vulnerabilities/4627