CVE-2001-0500

EPSS 96.7%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 96.7%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

18 Jun 2001Metasploit module available

18 Jun 2001Public PoC

09 Mar 2002Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

Affected products

n/a · n/a

public PoCs found — 5

exploitdbwww.exploit-db.com/exploits/20930unverified exploitdbwww.exploit-db.com/exploits/16472unverified exploitdbwww.exploit-db.com/exploits/20931unverified exploitdbwww.exploit-db.com/exploits/20932unverified exploitdbwww.exploit-db.com/exploits/20933unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-033 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197 http://www.cert.org/advisories/CA-2001-13.html http://www.ciac.org/ciac/bulletins/l-098.shtml http://www.iss.net/security_center/static/6705.php http://www.securityfocus.com/archive/1/191873 http://www.securityfocus.com/bid/2880