CVE Database
/

CVE-2000-0663

Back to search

CVE-2000-0663

Published: Oct 13, 2000

Modified: Aug 8, 2024

PUBLISHED

Description

The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability.

VendorProductVersions

n/a

n/a

affected
n/a

References

Q269049
vendor-advisory
x_refsource_MSKB
1507
vdb-entry
x_refsource_BID
MS00-052
vendor-advisory
x_refsource_MS
explorer-relative-path-name(5040)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now