CVE-2000-0089

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 4, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00903.6VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.CVE-2000-009110.0Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor CVE-2000-00926.2The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-009310.0An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.CVE-2000-00947.2procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for CVE-2000-00955.0The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to CVE-2000-00967.2Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-00975.0The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu CVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t CVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-01007.2The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing CVE-2000-01017.5The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.