Lucene search

[email protected]CVE-2001-0146

HistoryJun 02, 2001 - 4:00 a.m.

CVE-2001-0146

2001-06-0204:00:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

iis 5.0

exchange 2000

dos

url attack

cve-2001-0146

memory allocation error

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL’s.

CPENameOperatorVersion
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0
microsoft:exchange_servermicrosoft exchange servereq2000

CPE	Name	Operator	Version
microsoft:internet_information_services	microsoft internet information services	eq	5.0
microsoft:exchange_server	microsoft exchange server	eq	2000

References

www.kb.cert.org/vuls/id/796584

www.securityfocus.com/bid/2440

www.securityfocus.com/bid/2441

docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-014

exchange.xforce.ibmcloud.com/vulnerabilities/6171

exchange.xforce.ibmcloud.com/vulnerabilities/6172

6.9 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON

Related for CVE-2001-0146

cvelist1 cert1