Vulnerability in Microsoft Windows 2000
CVE-2000-0834
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.
EPSS: 0.396 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
Frequently asked questions
- What is CVE-2000-0834?
- CVE-2000-0834 is a vulnerability in Microsoft Windows 2000. Published 2000-11-14.
- Is CVE-2000-0834 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.