CVE-2001-0146: Microsoft Exchange Server

Medium severity, CVSS 5.0. EPSS: 37.1% chance of exploitation in the next 30 days.

IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's.

Affected products

• Microsoft Exchange Server: version 2000 only
• Microsoft Internet Information Services: version 5.0 only

Published 2001-06-02. Last modified 2026-06-16.