CVE-2000-0081

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jan 10, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00825.0WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.CVE-2000-00834.6HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gai CVE-2000-00845.0CuteFTP uses weak encryption to store password information in its tree.dat file.CVE-2000-00857.5Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN CVE-2000-00865.0Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.CVE-2000-00875.0Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Comm CVE-2000-00887.2Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka th CVE-2000-00892.1The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi CVE-2000-00903.6VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.CVE-2000-009110.0Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor CVE-2000-00926.2The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-009310.0An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.