CVE-2001-0500 Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Inte...
HighCVSS 10.0
EPSS 96.7%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft index server | = 2.0 | No fix listed |
| Microsoft indexing service | All versions | No fix listed |
| Microsoft internet information server | <= 6.0 | No fix listed |
References
- CA-2001-13 exploit patch third-party-advisory us-government-resource
- L-098 government-resource third-party-advisory
- iis-isapi-idq-bo(6705) vdb-entry
- 20010618 All versions of Microsoft Internet Information Services, Remote buffer overflow (SYSTEM Level Access) mailing-list
- 2880 vdb-entry
- MS01-033 vendor-advisory
- oval:org.mitre.oval:def:197 signature vdb-entry