CVE

Id
2967  
CVE No.
CVE-2001-0146  
Status
Candidate  
Description
IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL"s.  
Phase
Modified (20050509)  
Votes
ACCEPT(4) Baker, Cole, Lawler, Ziese | NOOP(1) Christey | RECAST(1) Frech  
Comments
Frech> (SF-EXEC) | XF:iis-malformed-url-dos(6171) | XF:exchange-malformed-url-dos(6172) | Not only is this two applications, but it is fixed by two patches. | Quoting Microsoft: | Because the flaw occurs in two different code modules, one of which installs | as part of IIS 5.0 and both of which install as part of Exchange 2000, it is | important for Exchange 2000 administrators to install both the IIS and | Exchange patches below. | Also, in the description, avoid using an apostrophe on "URLs" when it is | simply plural and not possessive (aka the "grocer"s apostrophe"). | Christey> Consider adding BID:2440 | Christey> Consider adding BID:2441  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
12241 2967 CVE-2001-0146 MS:MS01-014  View
12242 2967 CVE-2001-0146 URL:http://www.microsoft.com/technet/security/bulletin/MS01-014.asp  View
12243 2967 CVE-2001-0146 CERT-VN:VU#796584  View
12244 2967 CVE-2001-0146 URL:http://www.kb.cert.org/vuls/id/796584  View
12245 2967 CVE-2001-0146 BID:2440  View
12246 2967 CVE-2001-0146 URL:http://www.securityfocus.com/bid/2440  View
12247 2967 CVE-2001-0146 BID:2441  View
12248 2967 CVE-2001-0146 URL:http://www.securityfocus.com/bid/2441  View
12249 2967 CVE-2001-0146 XF:iis-malformed-url-dos(6171)  View
12250 2967 CVE-2001-0146 URL:http://xforce.iss.net/xforce/xfdb/6171  View
12251 2967 CVE-2001-0146 XF:exchange-malformed-url-dos(6172)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64061 JVNDB-2001-000035 Microsoft 製品における URL を無効化するサービス運用妨害 (DoS) の脆弱性 Microsoft IIS および Microsoft Exchange Server には、特定の形式の URL を含むリクエストを継続的に受信した場合、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2001-0146 2967 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000035.html  View