CVE-2001-0500

HighPublished

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute...

Published: Mar 9, 2002
Updated: Aug 8, 2024
Assigning CNA: mitre
Evidence observed: Jun 18, 2001

Primary CVSS

10.0/ 10High

nvd · CVSS 2.0

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS probability estimate

96.7%

High · next 30 days

Percentile: 99.9%
Model date: Oct 12, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

MS01-033 Microsoft IIS 5.0 IDQ Path OverflowModule
modules/exploits/windows/iis/ms01_033_idq.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: 2d664636002dRelated tool
Declared conditions
- platform: Windows($.exploit_windows/iis/ms01_033_idq.platform)
- verification: check_not_declared($.exploit_windows/iis/ms01_033_idq.check)

Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit)Exploit
Metasploit · windows · Jun 15, 2010

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.