1. CVE-Search
  2. CVE-2000-0519
ID CVE-2000-0519
Summary Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*
  • cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*
  • cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*
    cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*
CVSS
Base: 2.6 (as of 22-07-2021 - 13:53)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:N/A:N
refmap via4
bid 1309
cert CA-2000-10
misc http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
xf ie-revalidate-certificate(4627)
Last major update 22-07-2021 - 13:53
Published 05-06-2000 - 04:00
Last modified 22-07-2021 - 13:53
Back to Top