Vulnerability Details : CVE-2000-0519
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Exploit prediction scoring system (EPSS) score for CVE-2000-0519
Probability of exploitation activity in the next 30 days: 0.19%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 56 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2000-0519
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
2.6
|
LOW | AV:N/AC:H/Au:N/C:P/I:N/A:N |
4.9
|
2.9
|
NIST |
References for CVE-2000-0519
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/4627
- http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
-
http://www.cert.org/advisories/CA-2000-10.html
Patch;Third Party Advisory;US Government Resource
-
http://www.securityfocus.com/bid/1309
Patch;Vendor Advisory
Products affected by CVE-2000-0519
- cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*
- cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*