CVE-2001-0666: Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of servi...

Security readout for executives and security teams

This is a denial-of-service issue in Outlook Web Access for Microsoft Exchange 2000. A logged-in mailbox user could send a malformed request involving a deeply nested folder and consume server CPU, potentially degrading or interrupting webmail access. Exposure is limited to environments still running Microsoft Exchange 2000 with Outlook Web Access enabled and accessible to authenticated users. Public exposure increases operational risk, but the cited description requires a valid mailbox user. Treat this as a legacy availability risk. It is not shown as actively exploited, but any remaining Exchange 2000 OWA deployment should be reviewed promptly because authenticated users could disrupt webmail service. Mitigation focus: Identify any Microsoft Exchange 2000 OWA deployments.; Review Microsoft MS01-049 for vendor remediation guidance.; Restrict OWA access to trusted users and networks where feasible..

Prepared

Jul 1, 2026, 07:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.