CVE-2001-0337
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2001-0337
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft IIS WebDav Lock命令的内存泄漏导致拒绝服务攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IIS 5.0是微软的一个产品，随Windows 2000捆绑发售。IIS默认支持Webdev。 IIS 5.0中的WebDAV扩展中Lock方法的实现存在一个内存泄漏的缺陷，使得恶意用户可以耗尽服务器的所有可用内存。 如果连续请求一个不存在的文件，则会引发Lock方法中的内存泄漏。例如： LOCK /aaaaaaaaaaaaaaaaaaaaaaaaaa.htw HTTP/1.0 服务器最终将耗尽内存，运行缓慢以至崩溃、重启并恢复正常。但是可以通过一些方法来确定服务器内存何时即将被耗尽，从而在内存耗尽之前
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2001-0337
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2001-0337
请登录查看更多情报信息。
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026vendor-advisoryx_refsource_MS
- https://nvd.nist.gov/vuln/detail/CVE-2001-0337
Same Patch Batch · n/a · 2001-05-24 · 91 CVEs total
| CVE-2001-0437 | DCForum 'AZ'字段远程命令执行漏洞 | |
| CVE-2001-0433 | Savant缓冲区溢出漏洞 | |
| CVE-2001-0431 | iPlanet Web Server Enterprise Edition漏洞 | |
| CVE-2001-0424 | FreeBSD BubbleMon特权提升漏洞 | |
| CVE-2001-0421 | Solaris FTP Core Dump文件泄漏用户口令散列漏洞 | |
| CVE-2001-0420 | Web TalkBack.cgi方式目录遍历漏洞 | |
| CVE-2001-0419 | Oracle Application Server ndwfn4.so远程缓冲区溢出漏洞 | |
| CVE-2001-0418 | NCM Content Management System content.pl输入验证漏洞 | |
| CVE-2001-0425 | Adcycle AdLibrary.pm会话访问漏洞 | |
| CVE-2001-0436 | DCForum 'AZ'字段远程命令执行漏洞 | |
| CVE-2001-0435 | PGP分裂关键机制漏洞 | |
| CVE-2001-0438 | Mac OS X漏洞 | |
| CVE-2001-0441 | SLRN超长头缓冲区溢出漏洞 | |
| CVE-2001-0443 | QVT/Net服务拒绝漏洞 | |
| CVE-2001-0446 | IBM WCS (WebSphere Commerce Suite)漏洞 | |
| CVE-2001-0447 | 602Pro Lan Suite MS-Dos设备名称服务拒绝漏洞 | |
| CVE-2001-0448 | 602Pro LAN SUITE Web配置服务器服务拒绝漏洞 | |
| CVE-2001-0450 | Transsoft FTP Broker目录遍历漏洞 | |
| CVE-2001-0451 | INDEXU权限许可和访问控制漏洞 | |
| CVE-2001-0452 | BRS WebWeaver FTP 根目录物理路径泄露 |
Showing top 20 of 91 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2001-0337
No comments yet