CVE-2001-0337

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-03385.1Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabledCVE-2001-03397.5Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuallCVE-2001-03407.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execCVE-2001-03417.5Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitCVE-2001-03447.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cCVE-2001-03455.0Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creatCVE-2001-03465.0Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions anCVE-2001-03477.5Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accCVE-2001-03485.0Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspaCVE-2001-03497.2Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local usersCVE-2001-03504.6Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local usersCVE-2001-03512.1Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session a
CVE-2001-0337: Medium severity, CVSS 5.0 | Vulnix