critical10.0Public exploit code
CVE-2000-1089
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows NT 4.0 - Phonebook Server Buffer Overflow2000-12-04 · remote · windows · Verified
- Microsoft IIS - Phone Book Service Overflow (MS00-094) (Metasploit)2010-04-30 · remote · windows · Verified
Impact
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 2000 | All versions |
| Microsoft | Windows Nt | Version 4.0 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/2048
- http://www.stake.com/research/advisories/2000/a120400-1.txt
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5623
- http://www.securityfocus.com/bid/2048
- http://www.stake.com/research/advisories/2000/a120400-1.txt
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5623