CVE-2000-0711 Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious....
HighCVSS 7.5
EPSS 33.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft virtual machine | = 2000 | No fix listed |
| Microsoft virtual machine | = 3100 | No fix listed |
| Microsoft virtual machine | = 3200 | No fix listed |
| Microsoft virtual machine | = 3300 | No fix listed |
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.04 | No fix listed |
| netscape communicator | = 4.05 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.06 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.07 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.08 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
| netscape communicator | = 4.74 | No fix listed |
References
- CA-2000-15 patch third-party-advisory us-government-resource
- 1545 exploit patch vdb-entry vendor-advisory
- 20000805 Dangerous Java/Netscape Security Hole mailing-list
- 20000816 JDK 1.1.x Listening Socket Vulnerability (was Re: BrownOrifice can break firewalls!) mailing-list