CVE-2000-0034
MediumExploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled 'remember passwords.'
Risk Assessment
Stored passwords can be easily accessed by unauthorized individuals, posing a risk of unauthorized access to user accounts.
Recommendation
It is recommended to avoid using Netscape 4.7 or implement additional protective measures to secure the preferences.js file.
Other vulnerabilities in Netscape 4.7
See all- CVE-1999-0790Low
A remote attacker can read information from a Netscape user's cache via JavaScript.
- CVE-1999-0425Medium
Talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes.
- CVE-1999-0424Low
Talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes.
- CVE-1999-1262Medium
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, violating the Java security model.
Original NVD description (English source)
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."
Vulnerability data from NVD (NIST) · CISA KEV · EPSS