CVE-2001-0509

Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:exchange_server:5.0:-::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:-::::::
	cpe:2.3:a:microsoft:exchange_server:2000:-::::::
	cpe:2.3:a:microsoft:sql_server:7.0:-::::::
	cpe:2.3:a:microsoft:sql_server:2000:-::::::
	cpe:2.3:a:microsoft:windows_nt:4.0:::::::*
	cpe:2.3:o:microsoft:windows_2000:-:-::::::

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:::::::*

History

No history.

Information

Published : 2001-09-20 04:00

Updated : 2023-12-10 10:17

NVD link : CVE-2001-0509

Mitre link : CVE-2001-0509

CVE.ORG link : CVE-2001-0509

JSON object : View

Products Affected

microsoft

sql_server
windows_nt
windows_2000
exchange_server

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2001-0509", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-09-20T04:00:00.000", "references": [{"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs."}], "lastModified": "2020-04-02T12:56:29.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D823C88E-8560-469B-8655-4755E0484F14"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4F9C143-4734-4E5D-9281-F51513C5CAAF"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF429469-1B63-4BF3-A59F-F8180226BB6D"}, {"criteria": "cpe:2.3:a:microsoft:sql_server:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFD9D0A0-5403-4C8F-8614-2F7F2703C454"}, {"criteria": "cpe:2.3:a:microsoft:sql_server:2000:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EBF27CA-A9DC-4539-ABE9-DC59D63572E6"}, {"criteria": "cpe:2.3:a:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EBF51EB-AE3F-48AA-8AA9-99884F91CC76"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:-:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAA6977C-182F-4537-9140-7F33AC027C39"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}