Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0711. PoCs published by Alexey Yarovinsky.
AI-analyzed exploit summary The writeup describes a vulnerability in Java implementations where a malicious applet can bypass security checks to create a listening socket and accept connections. The flaw involves the ServerSocket class and its methods not properly enforcing security policies.
Description
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
Exploits (1)
The writeup describes a vulnerability in Java implementations where a malicious applet can bypass security checks to create a listening socket and accept connections. The flaw involves the ServerSocket class and its methods not properly enforcing security policies.