Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows 2000
Total 634 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0879 1 Microsoft 4 Sql Server, Windows 2000, Windows Nt and 1 more 2023-12-10 5.0 MEDIUM N/A
Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
CVE-1999-0572 1 Microsoft 2 Windows 2000, Windows Nt 2023-12-10 9.3 HIGH N/A
.reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks.
CVE-2001-0951 1 Microsoft 1 Windows 2000 2023-12-10 5.0 MEDIUM N/A
Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
CVE-2004-0118 1 Microsoft 2 Windows 2000, Windows Nt 2023-12-10 7.2 HIGH N/A
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
CVE-2003-0663 1 Microsoft 1 Windows 2000 2023-12-10 5.0 MEDIUM N/A
Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message.
CVE-1999-0504 1 Microsoft 2 Windows 2000, Windows Nt 2023-12-10 7.5 HIGH N/A
A Windows NT local user or administrator account has a default, null, blank, or missing password.
CVE-2002-0366 1 Microsoft 3 Windows 2000, Windows Nt, Windows Xp 2023-12-10 7.2 HIGH N/A
Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
CVE-2000-0851 1 Microsoft 1 Windows 2000 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.
CVE-2003-0822 1 Microsoft 4 Frontpage Server Extensions, Sharepoint Team Services, Windows 2000 and 1 more 2023-12-10 7.5 HIGH N/A
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
CVE-1999-0755 1 Microsoft 2 Windows 2000, Windows Nt 2023-12-10 5.0 MEDIUM N/A
Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password" option.
CVE-2003-0812 1 Microsoft 2 Windows 2000, Windows Xp 2023-12-10 7.5 HIGH N/A
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
CVE-2001-0324 1 Microsoft 2 Windows 2000, Windows 98 2023-12-10 2.6 LOW N/A
Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash.
CVE-2003-0818 1 Microsoft 4 Windows 2000, Windows 2003 Server, Windows Nt and 1 more 2023-12-10 7.5 HIGH N/A
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
CVE-2002-2328 1 Microsoft 1 Windows 2000 2023-12-10 7.1 HIGH N/A
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.