Resource exhaustion in Microsoft Exchange Server

CVE-2001-0666

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.021 (79.3th percentile) — read the EPSS interpretation.

Affected products

Microsoft Exchange_server — versions 2000
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)