CVE-2000-0519
LowExploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.
Risk Assessment
This may lead to exploitation of vulnerabilities, allowing attackers to impersonate trusted servers.
Recommendation
It is recommended to update Internet Explorer to the latest version or switch to a more secure web browser.
Other vulnerabilities in Internet Explorer 4.x, 5.x
See all- CVE-2000-0465Medium
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, allowing a remote attacker to read client files via the frame.
- CVE-2000-0464High
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the 'Malformed Component Attribute' vulnerability.
- CVE-2000-0156Medium
Internet Explorer versions 4.x and 5.x allow remote web servers to access files on the client that are outside of its security domain, known as the 'Image Source Redirect' vulnerability.
Original NVD description (English source)
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS