CVE-2001-0504 in the critical feed json
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to…
published 2001-08-14 25 y ago modified 2026-06-16 4 mo ago also EUVD-2001-0500
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 21.1%
- EPSS 21.1% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying.
Exploit prediction
21.11% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2001/ms01-037
vendor-advisory
-
ciac.org
/ciac/bulletins/l-107.shtml
third-party-advisory, government-resource
-
securityfocus.com
/bid/2988
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/6803
vdb-entry
-
kb.cert.org
/vuls/id/435963
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2001-0504
- NVD CVE-2001-0504
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.