CVE-2000-0034
CVSS 2.0 Score 5 of 10 (medium)
Details
Summary
CVE-2000-0034 is a vulnerability affecting Netscape 4.7 that allows user passwords to be recorded in the preferences.js file despite the user not enabling the "remember passwords" feature. This occurs during IMAP or POP sessions, posing a significant risk to the security of users' accounts. The Netscape 4.7 browser inadvertently stores passwords, bypassing the user's preference settings during email sessions. This issue, identified as CVE-2000-0034, can lead to password theft and unauthorized access to email accounts. Users of Netscape 4.7 may be unknowingly exposing their email account passwords due to a vulnerability (CVE-2000-0034). During IMAP or POP sessions, the browser records these passwords in the preferences.js file, even when the 'remember passwords' option is not enabled. CVE-2000-0034 is a security flaw in Netscape 4.7 where user passwords are saved in the preferences.js file during IMAP or POP sessions, regardless of the user's preference settings. This puts email accounts at risk as passwords can be accessed by unauthorized individuals. A critical vulnerability named CVE-2000-0034 affects Netscape 4.7, leading to the unintended storage of user passwords within the preferences.js file during IMAP or POP sessions, despite the user's settings not allowing for password recall. This exposure of account credentials heightens the risk of unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Netscape Communicator
Affected Vendors
- Netscape