CVE-2000-0034

CVSS 2.0 Score 5 of 10 (medium)

Details

Published Dec 22, 1999
Updated: Nov 20, 2024

Summary

CVE-2000-0034 is a vulnerability affecting Netscape 4.7 that allows user passwords to be recorded in the preferences.js file despite the user not enabling the "remember passwords" feature. This occurs during IMAP or POP sessions, posing a significant risk to the security of users' accounts. The Netscape 4.7 browser inadvertently stores passwords, bypassing the user's preference settings during email sessions. This issue, identified as CVE-2000-0034, can lead to password theft and unauthorized access to email accounts. Users of Netscape 4.7 may be unknowingly exposing their email account passwords due to a vulnerability (CVE-2000-0034). During IMAP or POP sessions, the browser records these passwords in the preferences.js file, even when the 'remember passwords' option is not enabled. CVE-2000-0034 is a security flaw in Netscape 4.7 where user passwords are saved in the preferences.js file during IMAP or POP sessions, regardless of the user's preference settings. This puts email accounts at risk as passwords can be accessed by unauthorized individuals. A critical vulnerability named CVE-2000-0034 affects Netscape 4.7, leading to the unintended storage of user passwords within the preferences.js file during IMAP or POP sessions, despite the user's settings not allowing for password recall. This exposure of account credentials heightens the risk of unauthorized access.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Netscape Communicator

Affected Vendors

  • Netscape