CVE-2001-0146

MEDIUM 5.0CVE-2001-0146 · Published 02/06/2001 · updated 16/06/2026

Package	Affected versions	Patched versions
exchange server microsoft	`= 2000`	No fix yet
internet information services microsoft	`= 5.0`	No fix yet

Description

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.

References

kb.cert.org/vuls/id/796584 · Third Party Advisory
securityfocus.com/bid/2440 · Third Party Advisory
securityfocus.com/bid/2441 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-014 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/6171 · VDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/6172 · VDB Entry

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free