CVE-2000-0475

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1350Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020
https://exchange.xforce.ibmcloud.com/vulnerabilities/4714
http://www.securityfocus.com/bid/1350Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020
https://exchange.xforce.ibmcloud.com/vulnerabilities/4714

Timeline

Published: Jun 15, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04765.0xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be re CVE-2000-04775.0Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that con CVE-2000-04785.0In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.CVE-2000-04795.0Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.CVE-2000-04805.0Dragon telnet server allows remote attackers to cause a denial of service via a long username.CVE-2000-04815.0Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-04825.0Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.CVE-2000-04837.5The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.CVE-2000-04845.0Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Excep CVE-2000-04852.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, ak CVE-2000-04865.0Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long len CVE-2000-04873.6The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40