CVE-2000-0676

Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.

Affected products

Java, Netscape Communicator, Netscape Navigator

Netscape Communicator

= 4.0, 4.04, 4.05, 4.5, 4.5_beta, 4.06, 4.6, 4.07, 4.08, 4.51, 4.61, 4.72, 4.73, 4.74

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

20.5% (97th percentile)

NVD status

Modified

Published

2000-10-13