2.6

CVE-2000-0519

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Ie Version 4.0 Edition windows_98
Microsoft ≫ Ie Version 4.0 Edition windows_nt
Microsoft ≫ Ie Version 4.0.1 Edition windows_95
Microsoft ≫ Ie Version 4.0.1 Edition windows_98
Microsoft ≫ Ie Version 4.0.1 Edition windows_nt
Microsoft ≫ Ie Version 5.0 Edition windows_2000
Microsoft ≫ Ie Version 5.0 Edition windows_95
Microsoft ≫ Ie Version 5.0 Edition windows_98
Microsoft ≫ Ie Version 5.0 Edition windows_nt_4.0
Microsoft ≫ Ie Version 5.0.1 Edition windows_2000
Microsoft ≫ Ie Version 5.0.1 Edition windows_95
Microsoft ≫ Ie Version 5.0.1 Edition windows_98
Microsoft ≫ Ie Version 5.0.1 Edition windows_nt_4.0
Microsoft ≫ Internet Explorer Version 4.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.84% 0.909
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
http://www.cert.org/advisories/CA-2000-10.html
Patch
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/1309
Patch
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
https://exchange.xforce.ibmcloud.com/vulnerabilities/4627