CVE-2000-0406: Netscape Communicator

Low severity, CVSS 2.6. EPSS: 1% chance of exploitation in the next 30 days.

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability.

Affected products

• Netscape Communicator: version 4.0 only; version 4.05 only; version 4.5 only; version 4.5_beta only; version 4.06 only; version 4.6 only; …

Published 2000-05-10. Last modified 2026-06-16.