← All CVEs

CVE-2000-0711

high · 7.5

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

7.5
CVSS
33.5%
EPSS (exploit prob.)
98th
EPSS percentile
2000-10-20
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
microsoftvirtual_machine2000
microsoftvirtual_machine3100
microsoftvirtual_machine3200
microsoftvirtual_machine3300
netscapecommunicator4.0
netscapecommunicator4.04
netscapecommunicator4.05
netscapecommunicator4.5
netscapecommunicator4.06
netscapecommunicator4.6
netscapecommunicator4.07
netscapecommunicator4.7
netscapecommunicator4.08
netscapecommunicator4.51
netscapecommunicator4.61
netscapecommunicator4.72
netscapecommunicator4.73
netscapecommunicator4.74

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0711