CVE-2000-0834

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08355.0search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the dCVE-2000-08367.5Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.CVE-2000-08375.0FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.CVE-2000-08385.0Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.CVE-2000-08395.0WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).CVE-2000-084010.0Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.CVE-2000-084110.0Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.CVE-2000-08425.0The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-084310.0Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a lCVE-2000-084410.0Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackeCVE-2000-08456.4kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialCVE-2000-08467.5Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
CVE-2000-0834: High severity, CVSS 7.5 | Vulnix