CVE-2001-0334

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-131

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6535Third Party Advisory, VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6535Third Party Advisory, VDB Entry

Timeline

Published: Jun 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03355.0FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a s CVE-2001-03365.0The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed CVE-2001-03375.0The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of serv CVE-2001-03385.1Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled CVE-2001-03397.5Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuall CVE-2001-03407.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to exec CVE-2001-03417.5Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbit CVE-2001-03447.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a c CVE-2001-03455.0Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creat CVE-2001-03465.0Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions an CVE-2001-03477.5Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user acc CVE-2001-03485.0Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspa