CVE-2001-0238: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 14.8% chance of exploitation in the next 30 days.

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 95: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only

Published 2001-07-02. Last modified 2026-06-16.