CVE-2001-0726: High severity Microsoft Exchange Server vulnerability

Published Dec 6, 2001

Updated

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

Affected Software

1 affected component

Microsoft Exchange Server=5.5

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057

Event History

Dec 6, 2001

CVE Published

05:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0726?

CVE-2001-0726 is considered to be of high severity due to its potential for unauthorized access to Exchange mailboxes.

How do I fix CVE-2001-0726?

To fix CVE-2001-0726, upgrade to a later version of Microsoft Exchange that addresses this vulnerability.

What are the potential impacts of CVE-2001-0726?

The potential impacts of CVE-2001-0726 include remote attackers performing arbitrary actions on a user's Exchange mailbox through malicious HTML emails.

What versions of Microsoft Exchange are affected by CVE-2001-0726?

CVE-2001-0726 specifically affects Microsoft Exchange Server version 5.5.

What type of attack is facilitated by CVE-2001-0726?

CVE-2001-0726 facilitates a cross-site scripting attack due to improper detection of inline scripts in Outlook Web Access.