CVE-2000-0889

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sbaVendor Advisory
http://www.cert.org/advisories/CA-2000-19.htmlPatch, Third Party Advisory, US Government Resource
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sbaVendor Advisory
http://www.cert.org/advisories/CA-2000-19.htmlPatch, Third Party Advisory, US Government Resource

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-08901.2periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a CVE-2000-08917.5A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email CVE-2000-08922.6Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or CVE-2000-08935.0The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target hos CVE-2000-089410.0HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti CVE-2000-089510.0Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb CVE-2000-08965.0WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewal CVE-2000-08975.0Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dir CVE-2000-08985.0Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and pos CVE-2000-08995.0Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, CVE-2000-09007.5Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2 CVE-2000-09014.6Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg in