CVE-2001-0335: Medium severity Microsoft Internet Information Server vulnerability
Published Jun 27, 2001
·Updated
FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.
Affected Software
1 affected component
Microsoft Internet Information Server<=5.0
Event History
Jun 27, 2001
CVE Published
04:00 AM
Sep 18, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0335?
CVE-2001-0335 is considered a medium severity vulnerability due to its potential for account enumeration.
2
How does CVE-2001-0335 affect users of IIS 5.0?
CVE-2001-0335 allows remote attackers to enumerate Guest accounts in trusted domains on systems running IIS 5.0.
3
What systems are affected by CVE-2001-0335?
CVE-2001-0335 affects Microsoft Internet Information Server versions up to and including 5.0.
4
How can I mitigate the risks of CVE-2001-0335?
Mitigation of CVE-2001-0335 can be achieved by disabling the FTP service or upgrading to a supported version of IIS.
5
Is there a patch available for CVE-2001-0335?
While there is no dedicated patch for CVE-2001-0335, upgrading to a later version of IIS will resolve the vulnerability.