CVE-2001-0096

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-00975.0The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST r CVE-2001-009810.0Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a CVE-2001-009910.0bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.CVE-2001-010010.0bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.CVE-2001-010110.0Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.CVE-2001-01027.2"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effe CVE-2001-01034.6CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to eas CVE-2001-01047.2MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password CVE-2001-01052.1Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.CVE-2001-01065.0Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a s CVE-2001-01075.0Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, wh CVE-2001-01085.0PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unres