CVE-2000-0517
MediumExploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site. This could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
Risk Assessment
The organization may be exposed to phishing attacks where users could be misled by fake websites that appear to be legitimate.
Recommendation
It is recommended to update the browser to a newer version that properly handles certificate warnings and to implement additional security measures for certificate verification.
Original NVD description (English source)
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.