CVE-2000-0711

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-07127.2Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optioCVE-2000-07137.6Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrCVE-2000-07147.2umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.CVE-2000-07152.1DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempoCVE-2000-07162.6WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, whichCVE-2000-07175.0GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.CVE-2000-07181.2A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.CVE-2000-07196.2VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.CVE-2000-07205.0news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attacCVE-2000-07216.2The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replaceCVE-2000-07226.2Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install insCVE-2000-07231.2Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system
CVE-2000-0711: High severity, CVSS 7.5 | Vulnix