« Volver al listado

CVE-2000-0885

Estado: ModificadaAlta (7.5)—

Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this candidate will be split into multiple candidates.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Microsoft — Systems Management ServerMicrosoft — Windows 2000Microsoft — Windows NT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2000-0885",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2000-12-19T05:00:00.000",
  "references": [
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5399",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/5399",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the \"Netmon Protocol Parsing\" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates."
    },
    {
      "lang": "es",
      "value": "Desbordamientos de búfer en Microsoft Network Monitor (Netmon) permiten a atacantes remotos ejecutar comandos arbitrarios a través de un nombre de navegador largo en una trama de exploración CIFS, un nombre de comunidad SNMP largo, o un nombre de usuario o nombre de archivo largo en una sesión SMB, también conocida como la vulnerabilidad 'Análisis de protocolo de Netmon'. NOTA: Es muy probable que este candidato se divida en múltiples candidatos."
    }
  ],
  "lastModified": "2026-09-23T09:10:01.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F714FC20-0412-472D-B4A3-EA548EE14E81"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:systems_management_server:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43E8A8EF-B54F-4413-9BC8-A6A479951313"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBD9C514-5AF7-4849-A535-F0F3C9339051"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}