Skip to content
Back to search

CVE-2000-0089

LOW
2.1NVD

Summary

generated automatically from NVD data

CVE-2000-0089 affects the rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0. The tool writes registry hive information to a temporary file whose permissions let local users read it, so sensitive registry data could be disclosed. This is known as the "RDISK Registry Enumeration File" vulnerability, and it carries a CVSS v2.0 score of 2.1 (LOW), with a local attack vector and partial confidentiality impact only.

NVD description

The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.

Share:

EPSS · FIRST.org

2.3%probability of exploitation in the next 30 days

Higher than 82% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-29, recomputed daily by FIRST.org.

CVSS v2.0 Score

2.1
/ 10.0
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N

Information

Published
4 févr. 2000
Updated
16 juin 2026
Status
Modified
Source
cve@mitre.org

Affected products

microsoft windows nt
Versions 4.0

Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.

Weaknesses (CWE)

NVD-CWE-Other

Similar CVEs

Other vulnerabilities of type

…

Know which CVEs hit the versions you run.

Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.