CVE-2001-0509: Input Validation

Published Aug 29, 2001

Updated

Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.

Affected Software

9 affected components

Microsoft Exchange Server=5.5

Microsoft Exchange Server=5.0

Microsoft Exchange Server=2000

Microsoft SQL Server=7.0

Microsoft SQL Server=2000

Microsoft Windows NT=4.0

Microsoft Windows 2000

Microsoft Windows NT=4.0

Microsoft Windows 2000

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041

Event History

Aug 29, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0509?

CVE-2001-0509 is classified as a denial of service vulnerability.

How do I fix CVE-2001-0509?

To fix CVE-2001-0509, it is recommended to apply security updates provided by Microsoft for affected products.

Which software is affected by CVE-2001-0509?

CVE-2001-0509 affects Microsoft Exchange Server 2000 and earlier, Microsoft SQL Server 2000 and earlier, Windows NT 4.0, and Windows 2000.

Can CVE-2001-0509 be exploited remotely?

Yes, CVE-2001-0509 can be exploited remotely by attackers sending malformed inputs to the RPC servers.

What are the potential impacts of CVE-2001-0509?

The potential impact of CVE-2001-0509 includes service interruptions and denial of service conditions.