CVE-2000-0711

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 34%

from disclosure to weapon0 days

Published on NVDOct 13

1st PoCAug 3

exploitation probability

34%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20139

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://www.cert.org/advisories/CA-2000-15.html http://www.securityfocus.com/bid/1545 http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp