Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows 2000
Total 634 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0511 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.5 HIGH N/A
IP forwarding is enabled on a machine which is not a router or firewall.
CVE-1999-0506 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.2 HIGH N/A
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
CVE-1999-0505 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.2 HIGH N/A
A Windows NT domain user or administrator account has a guessable password.
CVE-1999-0499 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.5 HIGH N/A
NETBIOS share information may be published through SNMP registry keys in NT.
CVE-1999-0249 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.2 HIGH N/A
Windows NT RSHSVC program allows remote users to execute arbitrary commands.
CVE-1999-0535 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 10.0 HIGH N/A
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
CVE-1999-0519 1 Microsoft 4 Outlook, Windows 2000, Windows 95 and 1 more 2022-08-17 7.5 HIGH N/A
A NETBIOS/SMB share password is the default, null, or missing.
CVE-1999-0504 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.5 HIGH N/A
A Windows NT local user or administrator account has a default, null, blank, or missing password.
CVE-1999-0503 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 7.2 HIGH N/A
A Windows NT local user or administrator account has a guessable password.
CVE-1999-0595 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 2.1 LOW N/A
A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.
CVE-1999-0590 3 Apple, Linux, Microsoft 6 Macos, Linux Kernel, Windows 2000 and 3 more 2022-08-17 10.0 HIGH N/A
A system does not present an appropriate legal message or warning to a user who is accessing it.
CVE-1999-0572 1 Microsoft 2 Windows 2000, Windows Nt 2022-08-17 9.3 HIGH N/A
.reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
CVE-1999-0391 1 Microsoft 3 Terminal Server, Windows 2000, Windows Nt 2022-08-17 7.5 HIGH N/A
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
CVE-2007-1751 1 Microsoft 5 Internet Explorer, Windows 2000, Windows 2003 Server and 2 more 2022-02-28 9.3 HIGH N/A
Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka "Uninitialized Memory Corruption Vulnerability."
CVE-2008-4250 1 Microsoft 5 Windows 2000, Windows Server 2003, Windows Server 2008 and 2 more 2022-02-09 10.0 HIGH N/A
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."
CVE-2006-3897 1 Microsoft 2 Internet Explorer, Windows 2000 2021-12-10 5.0 MEDIUM N/A
Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property.
CVE-2007-0066 1 Microsoft 6 Home Server, Small Business Server, Windows 2000 and 3 more 2021-09-13 7.1 HIGH N/A
The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."
CVE-2007-0843 1 Microsoft 4 Windows 2000, Windows 2003 Server, Windows Vista and 1 more 2021-08-09 4.6 MEDIUM N/A
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
CVE-2007-3958 1 Microsoft 8 Internet Explorer, Windows 2000, Windows 95 and 5 more 2021-07-23 7.1 HIGH N/A
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demonstrated by Art.gif.
CVE-2010-0247 1 Microsoft 4 Internet Explorer, Windows 2000, Windows Server 2003 and 1 more 2021-07-23 9.3 HIGH N/A
Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."