CVE-2001-0596: netscape communicator

EPSS trend

Probability

8.69%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.69% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremoteunixVerified
Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure
Maturity: weaponized

References

8 links

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393Vendor AdvisoryX Refsource CONECTIVA
www.redhat.com/support/errata/RHSA-2001-046.htmlVendor AdvisoryX Refsource REDHATPatch
marc.info?l=bugtraq&m=98685237415117&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/2637VDB EntryX Refsource BID
www.osvdb.org/5579VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/6344VDB EntryX Refsource XF
download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01Vendor AdvisoryX Refsource IMMUNIX
www.debian.org/security/2001/dsa-051Vendor AdvisoryX Refsource DEBIANPatch

Related vulnerabilities

CVE-2001-0921netscapecommunicator0.61%23y ago02-04-2003 05:00Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext.CVE-2000-1187netscapecommunicator+12.63%25y ago22-01-2001 05:00Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.CVE-2000-0406netscapecommunicator1.03%26y ago12-07-2000 04:00Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.CVE-2000-0655mozillamozilla+112.72%26y ago13-10-2000 04:00Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.CVE-2000-0034netscapecommunicator1.44%26y ago12-07-2000 04:00Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."CVE-2000-0517netscapecommunicator1.29%26y ago13-10-2000 04:00Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.

All vulnerabilities incommunicator

CVE-2001-0596: netscape communicator

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References