Description
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
References
- netscape-ssl-certificate(4550) vdb-entry
- 1260 vdb-entry
- CA-2000-08 third-party-advisory