CVE-2001-0337: Microsoft Internet Information Server

Medium severity, CVSS 5.0. EPSS: 5% chance of exploitation in the next 30 days.

The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests.

Affected products

• Microsoft Internet Information Server: up to and including 5.0

Published 2001-06-27. Last modified 2026-06-16.