By publication date
Exploited and new serious CVEs: November 2000
9 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2000-0830Proof of concept | annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 tmicrosoft · webtv | Medium5.0 | — | 25.8% | Nov 14, 2000 |
43Plan | CVE-2000-0833Proof of concept | Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.jack de winter · winsmtp | Critical10.0 | — | 10.4% | Nov 14, 2000 |
42Plan | CVE-2000-0834Proof of concept | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the Nmicrosoft · windows 2000 | High7.5 | — | 39.6% | Nov 14, 2000 |
45Plan | CVE-2000-0844Proof of concept | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackecaldera · openlinux ebuilder · CWE-264 | Critical10.0 | — | 15.6% | Nov 14, 2000 |
14Monitor | CVE-2000-0849No exploit | Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service vmicrosoft · windows media services | Low2.6 | — | 14.9% | Nov 14, 2000 |
51Plan | CVE-2000-0854Proof of concept | When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msimicrosoft · office | Critical10.0 | — | 37.2% | Nov 14, 2000 |
26Monitor | CVE-2000-0858No exploit | Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed remicrosoft · internet information server | Medium5.0 | — | 18.7% | Nov 14, 2000 |
33Monitor | CVE-2000-0868No exploit | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /capache · http server | Medium5.0 | — | 44.7% | Nov 14, 2000 |
35Monitor | CVE-2000-0869Proof of concept | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories viaapache · http server | Medium5.0 | — | 50.9% | Nov 14, 2000 |
- CVE-2000-083028Monitor
annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 t
MediumCVSS 5.0Proof of conceptEPSS 25%microsoft · webtvNov 14, 2000
- CVE-2000-083343Plan
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
CriticalCVSS 10.0Proof of conceptEPSS 10%jack de winter · winsmtpNov 14, 2000
- CVE-2000-083442Plan
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the N
HighCVSS 7.5Proof of conceptEPSS 39%microsoft · windows 2000Nov 14, 2000
- CVE-2000-084445Plan
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke
CriticalCVSS 10.0Proof of conceptEPSS 15%caldera · openlinux ebuilderNov 14, 2000
- CVE-2000-084914Monitor
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service v
LowCVSS 2.6No exploitEPSS 14%microsoft · windows media servicesNov 14, 2000
- CVE-2000-085451Plan
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi
CriticalCVSS 10.0Proof of conceptEPSS 37%microsoft · officeNov 14, 2000
- CVE-2000-085826Monitor
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed re
MediumCVSS 5.0No exploitEPSS 18%microsoft · internet information serverNov 14, 2000
- CVE-2000-086833Monitor
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /c
MediumCVSS 5.0No exploitEPSS 44%apache · http serverNov 14, 2000
- CVE-2000-086935Monitor
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via
MediumCVSS 5.0Proof of conceptEPSS 50%apache · http serverNov 14, 2000