CVE-2000-0849

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08507.5Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is CVE-2000-08514.6Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka CVE-2000-08527.2Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.CVE-2000-08535.0YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-085410.0When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msiCVE-2000-08555.0SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newlinCVE-2000-08567.5Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long CVE-2000-08577.5The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to causCVE-2000-08585.0Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed reCVE-2000-08595.0The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requestsCVE-2000-08605.0The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose namesCVE-2000-08617.2Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
CVE-2000-0849: Low severity, CVSS 2.6 | Vulnix