CVE-2000-0298

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02995.0Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP rCVE-2000-030010.0The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT doCVE-2000-03015.0Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.CVE-2000-03025.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile CVE-2000-03036.4Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.CVE-2000-03045.0Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformCVE-2000-03057.8Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by seCVE-2000-030610.0Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.CVE-2000-03075.0Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which preventCVE-2000-030810.0Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allCVE-2000-03092.1The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.CVE-2000-03105.0IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
CVE-2000-0298: High severity, CVSS 7.2 | Vulnix