CVSS: 7.5EPSS: 5%CPEs: 6EXPL: 0CVE-2001-0238
https://notcve.org/view.php?id=CVE-2001-0238
02 Jul 2001 — Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests. • http://www.ciac.org/ciac/bulletins/l-074.shtml •
CVSS: 9.8EPSS: 21%CPEs: 4EXPL: 4CVE-2000-0979 – Microsoft Windows 9x/ME - Share Level Password Bypass
https://notcve.org/view.php?id=CVE-2000-0979
19 Dec 2000 — File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability. • https://www.exploit-db.com/exploits/20283 •
CVSS: 5.0EPSS: 7%CPEs: 4EXPL: 1CVE-2000-0980
https://notcve.org/view.php?id=CVE-2000-0980
19 Dec 2000 — NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network. • http://www.securityfocus.com/bid/1781 •
CVSS: 7.5EPSS: 13%CPEs: 5EXPL: 1CVE-2000-1039
https://notcve.org/view.php?id=CVE-2000-1039
19 Dec 2000 — Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction tha... • http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html •
CVSS: 6.2EPSS: 9%CPEs: 3EXPL: 0CVE-2000-1003
https://notcve.org/view.php?id=CVE-2000-1003
11 Dec 2000 — NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash. • http://www.securityfocus.com/archive/1/139511 •
CVSS: 7.3EPSS: 1%CPEs: 3EXPL: 0CVE-2000-0790
https://notcve.org/view.php?id=CVE-2000-0790
20 Oct 2000 — The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file that is listed in the folder. • http://www.securityfocus.com/bid/1571 •
CVSS: 9.8EPSS: 1%CPEs: 5EXPL: 0CVE-2000-1218
https://notcve.org/view.php?id=CVE-2000-1218
14 Apr 2000 — The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache. • http://www.kb.cert.org/vuls/id/458659 • CWE-346: Origin Validation Error •
CVSS: 7.5EPSS: 16%CPEs: 3EXPL: 1CVE-2000-0168 – Microsoft Windows Server 2000/95/98/ME/NT 3.5.x/Enterprise Server 4.0/Terminal Server 4.0/Workstation 4.0 Microsoft DoS Device Name - Denial of Service
https://notcve.org/view.php?id=CVE-2000-0168
04 Mar 2000 — Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability. • https://www.exploit-db.com/exploits/19799 •
CVSS: 9.1EPSS: 5%CPEs: 10EXPL: 0CVE-1999-0909
https://notcve.org/view.php?id=CVE-1999-0909
20 Sep 1999 — Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 24%CPEs: 6EXPL: 1CVE-1999-0875 – Microsoft Windows 98a/98b/98SE / Solaris 2.6 - IRDP
https://notcve.org/view.php?id=CVE-1999-0875
11 Aug 1999 — DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. • https://www.exploit-db.com/exploits/19451 • CWE-16: Configuration •