What’s Vulnerable › Vulnerabilities

CVE-2001-0509

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-08-29 · updated 2026-06-16
• Weakness: CWE-20

Description

Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.

Affected products

• Microsoft Exchange Server: 5.0, 5.5, 2000
• Microsoft SQL Server: 7.0, 2000
• Microsoft Windows 2000: all versions
• Microsoft Windows Nt: 4.0 (and their updates)

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82

Get alerted when CVE-2001-0509 or the next vulnerability affects your stack