CVE-2000-0300

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1093Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com
http://www.securityfocus.com/bid/1093Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com

Timeline

Published: Apr 6, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03015.0Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.CVE-2000-03025.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile CVE-2000-03036.4Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.CVE-2000-03045.0Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malform CVE-2000-03057.8Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se CVE-2000-030610.0Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.CVE-2000-03075.0Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevent CVE-2000-030810.0Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 all CVE-2000-03092.1The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.CVE-2000-03105.0IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.CVE-2000-03112.1The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka CVE-2000-03127.2cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake pop