W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0720 | – | Sep 5 | A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the… Affected: All versions, or not specified |
| CVE-2002-0823 | – | Aug 12 | Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname… Affected: All versions, or not specified |
| CVE-2002-0443 | – | Jul 26 | Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the… Affected: All versions, or not specified |
| CVE-2002-0366 | – | Jul 3 | Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by… Affected: All versions, or not specified |
| CVE-2002-0597 | – | Jun 18 | LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445 Affected: All versions, or not specified |
| CVE-2002-0224 | – | May 16 | The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2002-0151 | – | Apr 4 | Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long… Affected: All versions, or not specified |
| CVE-2002-0070 | – | Mar 15 | Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been… Affected: All versions, or not specified |
| CVE-2002-0055 | – | Mar 8 | SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data… Affected: All versions, or not specified |
| CVE-2002-0054 | – | Mar 8 | SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows… Affected: All versions, or not specified |
| CVE-2002-0053 | – | Mar 8 | Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary… Affected: All versions, or not specified |
| CVE-2002-0020 | – | Mar 8 | Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options Affected: All versions, or not specified |
| CVE-2002-0018 | – | Mar 8 | In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative… Affected: All versions, or not specified |
| CVE-2001-1560 | – | Dec 31 | Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after… Affected: All versions, or not specified |
| CVE-2001-1519 | – | Dec 31 | RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients… Affected: All versions, or not specified |
| CVE-2001-1518 | – | Dec 31 | RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session… Affected: All versions, or not specified |
| CVE-2001-1517 | – | Dec 31 | RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that… Affected: All versions, or not specified |
| CVE-2001-0879 | – | Dec 20 | Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service Affected: All versions, or not specified |
| CVE-2001-0951 | – | Dec 7 | Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number… Affected: All versions, or not specified |
| CVE-2001-0860 | – | Dec 6 | Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which… Affected: All versions, or not specified |
| CVE-2001-0663 | – | Dec 6 | Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets Affected: All versions, or not specified |
| CVE-2001-0659 | – | Sep 20 | Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via… Affected: All versions, or not specified |
| CVE-2001-0543 | – | Sep 20 | Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts Affected: All versions, or not specified |
| CVE-2001-0509 | – | Sep 20 | Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote… Affected: All versions, or not specified |
| CVE-2001-0504 | – | Aug 14 | Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities… Affected: All versions, or not specified |
| CVE-2001-1288 | – | Jul 27 | Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times… Affected: All versions, or not specified |
| CVE-2001-0502 | – | Jul 21 | Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data… Affected: All versions, or not specified |
| CVE-2001-0351 | – | Jul 21 | Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service Affected: All versions, or not specified |
| CVE-2001-0350 | – | Jul 21 | Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by… Affected: All versions, or not specified |
| CVE-2001-0349 | – | Jul 21 | Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by… Affected: All versions, or not specified |
| CVE-2001-0348 | – | Jul 21 | Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace Affected: All versions, or not specified |
| CVE-2001-0347 | – | Jul 21 | Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the… Affected: All versions, or not specified |
| CVE-2001-0346 | – | Jul 21 | Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them Affected: All versions, or not specified |
| CVE-2001-0345 | – | Jul 21 | Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions Affected: All versions, or not specified |
| CVE-2001-0341 | – | Jul 21 | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration… Affected: All versions, or not specified |
| CVE-2001-0018 | – | Jul 21 | Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service… Affected: All versions, or not specified |
| CVE-2001-1302 | – | Jul 18 | The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or… Affected: All versions, or not specified |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: All versions, or not specified |
| CVE-2001-0238 | – | Jul 2 | Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests Affected: All versions, or not specified |
| CVE-2001-0241 | – | Jun 27 | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension… Affected: All versions, or not specified |
| CVE-2001-0237 | – | Jun 27 | Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting… Affected: All versions, or not specified |
| CVE-2001-0373 | – | Jun 18 | The default configuration of the Dr Affected: All versions, or not specified |
| CVE-2001-0261 | – | Jun 2 | Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files Affected: All versions, or not specified |
| CVE-2001-1347 | – | May 24 | Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which… Affected: All versions, or not specified |
| CVE-2001-0324 | – | May 3 | Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host… Affected: All versions, or not specified |
| CVE-2001-0147 | – | May 3 | Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of… Affected: All versions, or not specified |
| CVE-2001-0015 | – | Mar 12 | Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the… Affected: All versions, or not specified |
| CVE-2001-0046 | – | Feb 16 | The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive… Affected: All versions, or not specified |
| CVE-2001-0048 | – | Feb 12 | The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access… Affected: All versions, or not specified |
| CVE-2001-0014 | – | Feb 12 | Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)