National Vulnerability Database (CVE-2001-0500)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0500
Orirignal release date: 2001-07-21 Source: US-CERT/NIST ### Overview Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Microsoft Name: MS01-033 Hyperlink: http://www.microsoft.com/technet/security/bulletin/MS01-033.asp External Source: CERT Name: CA-2001-13 Hyperlink: http://www.cert.org/advisories/CA-2001-13.html ### Vulnerable Software and Vendor IIS (Microsoft) Index Server (Microsoft) Indexing Service (Microsoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0500