CVE-2000-0711

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 33.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-10-20 · updated 2026-06-16

Description

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected products

Microsoft Virtual Machine: 2000, 3100, 3200, 3300
Netscape Communicator: 4.0, 4.04, 4.05, 4.5, 4.06, 4.6 (+8)

References

http://www.cert.org/advisories/CA-2000-15.html
http://www.securityfocus.com/bid/1545
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp
http://www.cert.org/advisories/CA-2000-15.html
http://www.securityfocus.com/bid/1545
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp

Get alerted when CVE-2000-0711 or the next vulnerability affects your stack