CVE-2001-0500 in the critical feed json
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attack…
published 2001-07-21 25 y ago modified 2026-06-16 4 mo ago also EUVD-2001-0496
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 96.7%
- EPSS 96.7% chance of exploitation in 30 days, percentile 99.8%
- public exploits
- 6
- Metasploit, Exploit-DB
Summary
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Patch / fix
- cert.org/advisories/CA-2001-13.html advisory
Timeline
- First public exploit (Metasploit exploit/windows/iis/ms01_033_idq)
- Published
Exploit prediction
96.73% chance of exploitation in the next 30 days, higher than 99.8% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/iis/ms01_033_idq MS01-033 Microsoft IIS 5.0 IDQ Path Overflow metasploit exploit, good rank, 2001-06-18
- EDB-20933 Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (4) remote, 2001-06-18
- EDB-20932 Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (3) remote, 2001-06-18
- EDB-20931 Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (2) remote, 2001-06-21
- EDB-20930 Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (PoC) dos, 2001-06-18
- EDB-16472 Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit) remote, 2010-06-15
- cert.org http://www.cert.org/advisories/CA-2001-13.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
cert.org
/advisories/CA-2001-13.html
third-party-advisory, exploit, patch, us-government-resource
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2001/ms01-033
vendor-advisory
-
securityfocus.com
/archive/1/191873
mailing-list
-
securityfocus.com
/bid/2880
vdb-entry
-
ciac.org
/ciac/bulletins/l-098.shtml
third-party-advisory, government-resource
-
iss.net
/security_center/static/6705.php
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197
vdb-entry, signature
Sources
- CVE List CVE-2001-0500
- NVD CVE-2001-0500
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.