CVE-2000-0409

Netscape <4.73 - Local Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0409. PoCs published by foo.

AI-analyzed exploit summary The exploit describes a race condition in Netscape Communicator 4.73 and prior where a temporary file in /tmp is created with world-writable permissions before being restricted, allowing symbolic link attacks or content manipulation.

Description

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.

Exploits (1)

exploitdb WRITEUP VERIFIED
by foo · textlocalmultiple
https://www.exploit-db.com/exploits/19912

The exploit describes a race condition in Netscape Communicator 4.73 and prior where a temporary file in /tmp is created with world-writable permissions before being restricted, allowing symbolic link attacks or content manipulation.

Classification
Writeup 90%
Attack Type
Other
Complexity
Moderate
Reliability
Racy
Target: Netscape Communicator <= 4.73
No auth needed
Prerequisites: Ability to predict temporary filename · Write access to /tmp
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1201
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html

Scores

EPSS 0.0031
EPSS Percentile 23.2%

Details

Status published
Products (7)
netscape/communicator 4.5
netscape/communicator 4.6
netscape/communicator 4.7
netscape/communicator 4.51
netscape/communicator 4.61
netscape/communicator 4.72
netscape/communicator 4.73
Published May 10, 2000
Tracked Since Feb 18, 2026