CVE-2000-0711

Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2000-08-03 First Exploit
2000-09-19 CVE Reserved
2000-10-13 CVE Published
2023-11-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (5)

URL	Tag	Source
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com	Mailing List
http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/20139	2000-08-03
http://www.securityfocus.com/bid/1545	2024-08-08

URL	Date	SRC
http://www.cert.org/advisories/CA-2000-15.html	2023-11-07

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Microsoft Search vendor "Microsoft"		Virtual Machine Search vendor "Microsoft" for product "Virtual Machine"				2000 Search vendor "Microsoft" for product "Virtual Machine" and version "2000"		-		Affected
Microsoft Search vendor "Microsoft"		Virtual Machine Search vendor "Microsoft" for product "Virtual Machine"				3100 Search vendor "Microsoft" for product "Virtual Machine" and version "3100"		-		Affected
Microsoft Search vendor "Microsoft"		Virtual Machine Search vendor "Microsoft" for product "Virtual Machine"				3200 Search vendor "Microsoft" for product "Virtual Machine" and version "3200"		-		Affected
Microsoft Search vendor "Microsoft"		Virtual Machine Search vendor "Microsoft" for product "Virtual Machine"				3300 Search vendor "Microsoft" for product "Virtual Machine" and version "3300"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.0 Search vendor "Netscape" for product "Communicator" and version "4.0"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.04 Search vendor "Netscape" for product "Communicator" and version "4.04"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.05 Search vendor "Netscape" for product "Communicator" and version "4.05"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.5 Search vendor "Netscape" for product "Communicator" and version "4.5"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.06 Search vendor "Netscape" for product "Communicator" and version "4.06"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.6 Search vendor "Netscape" for product "Communicator" and version "4.6"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.07 Search vendor "Netscape" for product "Communicator" and version "4.07"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.7 Search vendor "Netscape" for product "Communicator" and version "4.7"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.08 Search vendor "Netscape" for product "Communicator" and version "4.08"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.51 Search vendor "Netscape" for product "Communicator" and version "4.51"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.61 Search vendor "Netscape" for product "Communicator" and version "4.61"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.72 Search vendor "Netscape" for product "Communicator" and version "4.72"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.73 Search vendor "Netscape" for product "Communicator" and version "4.73"		-		Affected
Netscape Search vendor "Netscape"		Communicator Search vendor "Netscape" for product "Communicator"				4.74 Search vendor "Netscape" for product "Communicator" and version "4.74"		-		Affected