CVE-2001-0660 — Microsoft Exchange Server vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
19.6%
top 4.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedOct 30
Latest updateApr 30

Description

Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: support.microsoft.com ↗Patch: support.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pqp4-m4cg-2cqf: Outlook Web Access (OWA) in Microsoft Exchange 5↗2022-04-30
▶
CVEList
CVE-2001-0660: Outlook Web Access (OWA) in Microsoft Exchange 5↗2002-03-09
▶
CVE-2001-0660 — Microsoft Exchange Server vulnerability | cvebase