Improper input validation in Microsoft Exchange Server
CVE-2001-0509
Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.170 (96.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Exchange_server — versions 5.0, 5.5, 2000
- Microsoft Sql_server — versions 7.0, 2000
- Microsoft Windows_2000
- Microsoft Windows_nt — versions 4.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)