CVE-2000-0259

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1105Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024
http://www.securityfocus.com/bid/1105Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024

Timeline

Published: Apr 12, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02607.5Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka th CVE-2000-02615.0The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-02625.0The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.CVE-2000-02632.1The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.CVE-2000-02642.1Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or CVE-2000-02654.6Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.CVE-2000-02662.6Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java CVE-2000-02674.6Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.CVE-2000-02685.0Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is CVE-2000-02692.1Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify CVE-2000-02703.6The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink att CVE-2000-02714.6read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read