: Security Vulnerabilities

Cpe Name:cpe:/o:microsoft:windows_2000

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2010-4562	200		+Info	2012-02-02	2012-02-03	4.3	None	Remote	Medium	Not required	Partial	None	None
Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
2	CVE-2010-0719	20		DoS	2010-02-26	2010-06-05	4.7	None	Local	Medium	Not required	None	None	Complete
An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local users to cause a denial of service (system crash) via a crafted application.
3	CVE-2008-0088	20		DoS	2008-02-12	2008-09-05	6.8	None	Remote	Low	Single system	None	None	Complete
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
4	CVE-2007-6753			+Priv	2012-03-28	2012-04-05	6.2	None	Local	High	Not required	Complete	Complete	Complete
Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, when using an environment configured with a string such as %APPDATA% or %PROGRAMFILES% in a certain way, allows local users to gain privileges via a Trojan horse DLL under the current working directory, as demonstrated by iTunes and Safari.
5	CVE-2007-6043	200		+Info	2007-11-20	2008-09-05	7.1	None	Remote	Medium	Not required	Complete	None	None
The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
6	CVE-2007-6026	119		Exec Code Overflow	2007-11-19	2011-08-02	9.3	Admin	Remote	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count. NOTE: this might be the same issue as CVE-2005-0944.
7	CVE-2007-1912		1	Overflow	2007-04-10	2008-09-05	6.8	User	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.
8	CVE-2007-1692	16			2007-03-26	2012-11-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web traffic by registering a proxy server using WINS or DNS, then responding to WPAD requests, as demonstrated using Internet Explorer. NOTE: it could be argued that if an attacker already has control over WINS/DNS, then web traffic could already be intercepted by modifying WINS or DNS records, so this would not cross privilege boundaries and would not be a vulnerability. It has also been reported that DHCP is an alternate attack vector.
9	CVE-2007-0843	264		Bypass	2007-02-22	2011-06-16	4.6	User	Local	Low	Not required	Partial	Partial	Partial
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.
10	CVE-2007-0026			Exec Code Mem. Corr.	2007-02-13	2008-09-05	7.6	Admin	Remote	High	Not required	Complete	Complete	Complete
The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
11	CVE-2006-7210		3	DoS	2007-06-27	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in the IHDR block.
12	CVE-2006-0988			DoS	2006-03-03	2008-09-05	7.8	None	Remote	Low	Not required	None	None	Complete
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
13	CVE-2006-0488			+Info	2006-01-31	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.
14	CVE-2005-2150				2005-07-11	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Windows services via svcctl or (2) read eventlogs via eventlog.
15	CVE-2005-1983			Exec Code Overflow +Priv	2005-08-10	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
16	CVE-2005-1214			Exec Code	2005-06-14	2008-09-10	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
17	CVE-2005-1212			Exec Code Overflow	2005-06-14	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
18	CVE-2005-1208			Exec Code Overflow	2005-06-14	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
19	CVE-2005-1206			Exec Code Overflow	2005-06-14	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
20	CVE-2005-0551			Overflow +Priv	2005-05-02	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
21	CVE-2005-0550			DoS Overflow	2005-05-02	2008-09-10	2.1	None	Local	Low	Not required	None	None	Partial
Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause a denial of service (i.e., system crash) via a malformed request, aka "Object Management Vulnerability".
22	CVE-2005-0058			Exec Code Overflow	2005-08-10	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers elevate privileges or execute arbitrary code via a crafted message.
23	CVE-2004-1649			Exec Code Overflow	2004-08-31	2008-09-05	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter. NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
24	CVE-2004-1049			Exec Code Overflow	2004-12-31	2008-09-10	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."
25	CVE-2004-0540				2004-08-06	2008-09-05	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
26	CVE-2004-0214			DoS Exec Code Overflow	2004-11-03	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
27	CVE-2004-0209			Exec Code	2004-11-03	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
28	CVE-2004-0208			+Priv	2004-11-03	2008-09-10	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
29	CVE-2004-0207			+Priv	2004-11-03	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
30	CVE-2004-0206			Exec Code Overflow +Priv	2004-11-03	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
31	CVE-2004-0124				2004-06-01	2008-09-10	2.6	None	Remote	High	Not required	Partial	None	None
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
32	CVE-2004-0123	119		DoS Exec Code Overflow	2004-06-01	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
33	CVE-2004-0120			DoS	2004-06-01	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
34	CVE-2004-0119			DoS Exec Code	2004-06-01	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.
35	CVE-2004-0118			Exec Code	2004-06-01	2008-09-10	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
36	CVE-2004-0117			Exec Code	2004-06-01	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
37	CVE-2004-0116			DoS	2004-06-01	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
38	CVE-2003-0910			Exec Code	2004-06-01	2008-09-10	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.
39	CVE-2003-0908			Exec Code	2004-06-01	2008-09-10	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.
40	CVE-2003-0807			DoS Overflow	2004-06-01	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
41	CVE-2003-0663			DoS	2004-06-01	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message.
42	CVE-2003-0469			DoS Exec Code Overflow	2003-08-07	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag.
43	CVE-2003-0349			Exec Code Overflow	2003-07-24	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
44	CVE-2002-1700			XSS	2002-12-31	2008-09-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
45	CVE-2002-0699				2002-10-04	2008-09-10	5.0	None	Remote	Low	Not required	None	Partial	None
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
46	CVE-2002-0367			+Priv	2002-06-25	2008-09-05	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
47	CVE-2002-0070	119		Exec Code Overflow	2002-03-15	2008-09-05	7.6	Admin	Remote	High	Not required	Complete	Complete	Complete
Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
48	CVE-2002-0053			DoS Exec Code Overflow	2002-03-08	2008-09-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.
49	CVE-2002-0020			Exec Code Overflow	2002-03-08	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
50	CVE-2002-0018			+Priv	2002-03-08	2008-09-10	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.

Total number of vulnerabilities : 135 Page : 1 (This Page)2 3