CVE-2000-0711

Published: Oct 20, 2000Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected (18)

Products: Microsoft: Virtual Machine · Netscape: Communicator

1 product

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Microsoft Virtual Machine	Version 2000
Microsoft Virtual Machine	Version 3100
Microsoft Virtual Machine	Version 3200
Microsoft Virtual Machine	Version 3300
Netscape Communicator	Version 4.04
Netscape Communicator	Version 4.05
Netscape Communicator	Version 4.06
Netscape Communicator	Version 4.07
Netscape Communicator	Version 4.08
Netscape Communicator	Version 4.0
Netscape Communicator	Version 4.51
Netscape Communicator	Version 4.5
Netscape Communicator	Version 4.61
Netscape Communicator	Version 4.6
Netscape Communicator	Version 4.72
Netscape Communicator	Version 4.73
Netscape Communicator	Version 4.74
Netscape Communicator	Version 4.7