CVE-2000-0155

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/993Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org
http://www.securityfocus.com/bid/993Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org

Timeline

Published: Feb 18, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01565.1Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imag CVE-2000-01577.2NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.CVE-2000-01587.5Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-01597.5HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow a CVE-2000-01607.6The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components withou CVE-2000-01617.5Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex CVE-2000-01625.1The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that CVE-2000-01634.6asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.CVE-2000-01647.2The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-01657.5The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.CVE-2000-016610.0Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.CVE-2000-01672.1IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pi