CVE-2000-0330: High severity Microsoft Windows 95 vulnerability
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Windows 9xfrom your environment.Decommission or remove systems running Windows 95/Windows 98 (Microsoft Windows 9x) from production networks or replace the operating system to eliminate the vulnerable networking software.
- Compensating control
Isolate affected Windows 95/98 hosts from untrusted networks: block incoming network access at the perimeter and host firewalls, restrict management access to trusted IPs only, or disconnect these systems from the network to prevent remote exploitation of the 'File Access URL' vulnerability.
- Operational
If immediate removal is not possible, monitor affected hosts for signs of compromise, plan migration to supported operating systems, and apply any vendor-supplied patches if/when they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0330?
CVE-2000-0330 is classified as a critical vulnerability due to its potential to allow remote command execution.
How do I fix CVE-2000-0330?
To mitigate CVE-2000-0330, it is recommended to upgrade to a supported version of Windows or apply relevant patches if available.
What systems are affected by CVE-2000-0330?
CVE-2000-0330 affects Microsoft Windows 95 and Windows 98 operating systems.
What kind of attacks can be executed using CVE-2000-0330?
Attackers can exploit CVE-2000-0330 to execute arbitrary commands remotely by utilizing a specially crafted long file name string.
Is CVE-2000-0330 still a threat today?
While CVE-2000-0330 primarily affects outdated systems like Windows 95 and 98, users of these systems remain susceptible if not patched or upgraded.