CVE-2000-0222

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Feb 15, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02237.2Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameteCVE-2000-02241.2ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.CVE-2000-02255.0The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.CVE-2000-02265.0IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "CVE-2000-02272.1The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users toCVE-2000-02285.0Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the CVE-2000-02297.2gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-roCVE-2000-02307.2Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.CVE-2000-02317.2Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.CVE-2000-02322.1Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP prinCVE-2000-023310.0SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.CVE-2000-02345.0The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htacc
CVE-2000-0222: Critical severity, CVSS 10.0 | Vulnix