CVE-2000-0070

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 12, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00715.0IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensiCVE-2000-00724.6Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify aCVE-2000-00735.0Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.CVE-2000-00747.5PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions.CVE-2000-00755.0Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by reCVE-2000-00762.1nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.CVE-2000-00777.2The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver usCVE-2000-00787.2The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses CVE-2000-00797.5The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.CVE-2000-00802.1AIX techlibss allows local users to overwrite files via a symlink attack.CVE-2000-008110.0Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeciCVE-2000-00825.0WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.
CVE-2000-0070: High severity, CVSS 7.2 | Vulnix