CVE-2001-0509

Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82	Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:exchange_server:5.0:-::::::
	cpe:2.3:a:microsoft:exchange_server:5.5:-::::::
	cpe:2.3:a:microsoft:exchange_server:2000:-::::::
	cpe:2.3:a:microsoft:sql_server:7.0:-::::::
	cpe:2.3:a:microsoft:sql_server:2000:-::::::
	cpe:2.3:a:microsoft:windows_nt:4.0:::::::*
	cpe:2.3:o:microsoft:windows_2000:-:-::::::

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:::::::*

History

20 Nov 2024, 23:35

Type	Values Removed	Values Added
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041 - Patch, Vendor Advisory
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 - Third Party Advisory~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82 - Third Party Advisory

Information

Published : 2001-09-20 04:00

Updated : 2024-11-20 23:35

NVD link : CVE-2001-0509

Mitre link : CVE-2001-0509

CVE.ORG link : CVE-2001-0509

JSON object : View

Products Affected

microsoft

sql_server
exchange_server
windows_2000
windows_nt

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2001-0509", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-09-20T04:00:00.000", "references": [{"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs."}], "lastModified": "2024-11-20T23:35:32.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D823C88E-8560-469B-8655-4755E0484F14"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4F9C143-4734-4E5D-9281-F51513C5CAAF"}, {"criteria": "cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF429469-1B63-4BF3-A59F-F8180226BB6D"}, {"criteria": "cpe:2.3:a:microsoft:sql_server:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFD9D0A0-5403-4C8F-8614-2F7F2703C454"}, {"criteria": "cpe:2.3:a:microsoft:sql_server:2000:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EBF27CA-A9DC-4539-ABE9-DC59D63572E6"}, {"criteria": "cpe:2.3:a:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EBF51EB-AE3F-48AA-8AA9-99884F91CC76"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:-:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAA6977C-182F-4537-9140-7F33AC027C39"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}