CVE-2000-0323

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03245.0pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.CVE-2000-03257.2The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.CVE-2000-03265.0Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt CVE-2000-03277.6Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cCVE-2000-03285.0Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessioCVE-2000-03295.1A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTMLCVE-2000-03307.6The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File CVE-2000-03315.0Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service viCVE-2000-03325.0UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that incCVE-2000-03335.0tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump CVE-2000-03342.1The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorizeCVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
CVE-2000-0323: High severity, CVSS 7.6 | Vulnix