CVE-2000-0711

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected products

Netscape Communicator

Microsoft Virtual Machine

= 2000, 3100, 3200, 3300

Netscape Communicator

= 4.0, 4.04, 4.05, 4.5, 4.06, 4.6, 4.07, 4.7, 4.08, 4.51, 4.61, 4.72, 4.73, 4.74

CVSS 2.0

7.5 HIGH

EPSS

33.5% (98th percentile)

NVD status

Modified

Published

2000-10-13