CVE-2001-0340: Malicious File Upload

Published Jul 21, 2001

Updated

An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.

Affected Software

2 affected components

Microsoft Exchange Server=5.5

Microsoft Exchange Server=2000

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030

Event History

Jul 21, 2001

CVE Published

04:00 AM

Sep 18, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0340?

CVE-2001-0340 is considered a critical vulnerability due to its ability to execute arbitrary script code from malicious email attachments.

How can I fix CVE-2001-0340?

To fix CVE-2001-0340, it is recommended to apply the appropriate security updates provided by Microsoft for Exchange 2000 Server.

Which software versions are affected by CVE-2001-0340?

CVE-2001-0340 affects Microsoft Exchange Server 2000 and version 5.5.

What types of attacks does CVE-2001-0340 allow?

CVE-2001-0340 allows attackers to execute malicious scripts on a user's mailbox without their consent.

Is CVE-2001-0340 related to any specific web browser?

Yes, CVE-2001-0340 involves an interaction with Internet Explorer that exploits the vulnerability in Outlook Web Access.