CVE-2000-0028

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Dec 23, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00294.6UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.CVE-2000-00305.0Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.CVE-2000-00316.2The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.CVE-2000-003210.0Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.CVE-2000-00335.0InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.CVE-2000-00345.0Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember pas CVE-2000-00354.6resend command in Majordomo allows local users to gain privileges via shell metacharacters.CVE-2000-00365.0Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.CVE-2000-00374.6Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.CVE-2000-00387.5glFtpD includes a default glftpd user account with a default password and a UID of 0.CVE-2000-00395.0AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.CVE-2000-004010.0glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.