VULNERABILITY INTELLIGENCE

CVE-2001-0666

CVSS score2.1 LOW

EPSS probability2.05%

CISA KEVNot currently listed

Published2001-10-30

Last modified2026-06-16

CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P

Description

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.

Weakness classification

CWE-400: Uncontrolled Resource Consumption

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Patch, Vendor Advisory
cve@mitre.org — VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry