CVE-2001-0338

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-03397.5Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuallCVE-2001-03407.5An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execCVE-2001-03417.5Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitCVE-2001-03447.2An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cCVE-2001-03455.0Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creatCVE-2001-03465.0Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions anCVE-2001-03477.5Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accCVE-2001-03485.0Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspaCVE-2001-03497.2Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local usersCVE-2001-03504.6Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local usersCVE-2001-03512.1Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session aCVE-2001-03525.0SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it fr