CVE-2001-0500

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jul 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-05014.6Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manne CVE-2001-05024.6Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal CVE-2001-05035.0Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to CVE-2001-05047.5Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to g CVE-2001-05055.0Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large CVE-2001-05067.2Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for CVE-2001-05077.2IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse fi CVE-2001-05085.0Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.CVE-2001-05095.0Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT CVE-2001-05135.0Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, wh CVE-2001-05147.5SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community s CVE-2001-05155.0Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large off