NetSight
IP …
high7.5Public exploit code

CVE-2000-0711

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a serve…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected products

VendorProductAffected versions
MicrosoftVirtual Machine
Versions 2000, 3100, 3200, 3300
NetscapeCommunicator
Versions 4.0, 4.04, 4.05, 4.5, 4.06, 4.6

References