Unrated severityNVD Advisory· Published Oct 30, 2001· Updated Jun 16, 2026

CVE-2001-0660

Description

Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Exchange Server
cpe:2.3:a:microsoft:exchange_server:*:sp4:*:*:*:*:*:*
Range: <=5.5
Oracle Corporation/Exchangellm-fuzzy
Range: <=5.5 SP4

Patches

Vulnerability mechanics

References

support.microsoft.com/support/kb/articles/Q307/1/95.ASPnvdPatchVendor Advisory
www.securityfocus.com/bid/3301nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-047nvd
exchange.xforce.ibmcloud.com/vulnerabilities/7089nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.018
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000