Unscored severity · published Oct 20, 2000
CVE-2000-0676
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file",…
–
CVSS
20.5%
EPSS
No
On KEV
Description
Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.
Exploitation
Is it being used?
Exploit prediction (EPSS)20.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Communicator · Netscape
4.0; 4.04; 4.05; 4.5; 4.5_beta; 4.06; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0676
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0676
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html
www.calderasystems.com
http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt
More from Communicator
–
CVE-2002-2284
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes
–
CVE-2002-2338
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message…
–
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is…
–
CVE-2002-1766
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute
–
CVE-2002-2248
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the…