Vulnerabilities > Microsoft > Windows 2000 > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-12-31 | CVE-2002-2132 | Unspecified vulnerability in Microsoft Windows 2000 and Windows XP Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes. | 2.1 |
| 2001-12-31 | CVE-2001-1518 | Denial of Services vulnerability in Microsoft Windows 2000 RunAs Service RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. | 2.1 |
| 2001-12-31 | CVE-2001-1560 | Denial of Service vulnerability in Microsoft Windows 2000 and Windows XP Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message. | 2.1 |
| 2001-07-27 | CVE-2001-1288 | Unspecified vulnerability in Microsoft Windows 2000 and Windows NT Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe. | 2.1 |
| 2001-07-21 | CVE-2001-0351 | Unspecified vulnerability in Microsoft Windows 2000 Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service. | 2.1 |
| 2001-07-18 | CVE-2001-1302 | Unspecified vulnerability in Microsoft Windows 2000 The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function. | 2.1 |
| 2001-06-18 | CVE-2001-0373 | Unspecified vulnerability in Microsoft Windows 2000 and Windows NT The default configuration of the Dr. | 2.1 |
| 2001-06-02 | CVE-2001-0261 | Unspecified vulnerability in Microsoft Windows 2000 Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files. | 2.1 |
| 2001-05-03 | CVE-2001-0324 | Unspecified vulnerability in Microsoft Windows 2000 and Windows 98 Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash. | 2.6 |
| 2000-10-20 | CVE-2000-0771 | Unspecified vulnerability in Microsoft Windows 2000 Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability. | 2.1 |