CVE-2001-0666

LOW 2.1CVE-2001-0666 · Published 30/10/2001 · updated 16/06/2026

In short

CVE-2001-0666 is a LOW (CVSS 2.1) vulnerability affecting exchange server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
exchange server microsoft	`= 2000`	No fix yet

Description

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.

References

securityfocus.com/bid/3368 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-049 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/7168 · VDB Entry

More vulnerabilities in exchange server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free