CVE-2000-1089

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/2048Exploit, Patch, Vendor Advisory
http://www.stake.com/research/advisories/2000/a120400-1.txtExploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
https://exchange.xforce.ibmcloud.com/vulnerabilities/5623
http://www.securityfocus.com/bid/2048Exploit, Patch, Vendor Advisory
http://www.stake.com/research/advisories/2000/a120400-1.txtExploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
https://exchange.xforce.ibmcloud.com/vulnerabilities/5623

Timeline

Published: Jan 9, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-10905.0Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses t CVE-2000-10925.0loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by insertin CVE-2000-10937.5Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.CVE-2000-10947.5Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" comma CVE-2000-10957.2modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.CVE-2000-10963.7crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user execu CVE-2000-10975.0The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authenticatio CVE-2000-10985.0The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.CVE-2000-10995.1Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed clas CVE-2000-11007.5The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows CVE-2000-11015.0Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local us CVE-2000-11025.0PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "op