CVE-2001-0666: Microsoft Exchange Server

Low severity, CVSS 2.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.

Affected products

• Microsoft Exchange Server: version 2000 only

Published 2001-10-30. Last modified 2026-06-16.