Lucene search

[email protected]CVE-2000-0518

HistoryJun 05, 2000 - 4:00 a.m.

CVE-2000-0518

2000-06-0504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

internet explorer

ie 4.x

ie 5.x

ssl certificate

vulnerability

cve-2000-0518

nvd

6.8 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

55.8%

JSON

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different “SSL Certificate Validation” vulnerabilities.

CPENameOperatorVersion
microsoft:iemicrosoft ieeq5.0
microsoft:iemicrosoft ieeq5.0.1
microsoft:iemicrosoft ieeq4.0.1
microsoft:iemicrosoft ieeq4.0
microsoft:iemicrosoft ieeq5
microsoft:internet_explorermicrosoft internet explorereq4.0

CPE	Name	Operator	Version
microsoft:ie	microsoft ie	eq	5.0
microsoft:ie	microsoft ie	eq	5.0.1
microsoft:ie	microsoft ie	eq	4.0.1
microsoft:ie	microsoft ie	eq	4.0
microsoft:ie	microsoft ie	eq	5
microsoft:internet_explorer	microsoft internet explorer	eq	4.0

References

www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt

www.cert.org/advisories/CA-2000-10.html

www.securityfocus.com/bid/1309

docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039

exchange.xforce.ibmcloud.com/vulnerabilities/4624

6.8 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2000-0518

cert1