10

CVE-2001-0500

Exploit

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Index Server Version2.0
Microsoft ≫ Indexing Service Editionwindows_2000
Microsoft ≫ Internet Information Server Updatebeta Version <= 6.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 90.87% 0.996
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
http://www.cert.org/advisories/CA-2001-13.html
Patch
Third Party Advisory
US Government Resource
Exploit