CVE-2000-0409
3.7 · LOWOverview
CVE-2000-0409 is a low-severity vulnerability affecting netscape communicator. It was published on May 10, 2000 and has a CVSS 2.0 base score of 3.7 (LOW).
This vulnerability has a CVSS 2.0 base score of 3.7, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical Description
Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.
Remediation
Check the references section for vendor advisories and patches from netscape. Update communicator to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
Frequently Asked Questions
What is CVE-2000-0409?
CVE-2000-0409 is a low-severity vulnerability affecting netscape communicator. It was published on May 10, 2000 and has a CVSS 2.0 base score of 3.7 (LOW).
How severe is CVE-2000-0409?
This vulnerability has a CVSS 2.0 base score of 3.7, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-0409?
Check the references section for vendor advisories and patches from netscape. Update communicator to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-0409?
CyberStrike's AI-powered security agents can automatically detect CVE-2000-0409 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2000
View all →SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
The Protected Store in Windows 2000 does not properly select the strongest encryption when available
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w
LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kil