CVE-2001-0500
EXPLOITEDIndex Server and Indexing Service - Remote Code Execution via Long Argument to ISAPI Extension
Title source: llmExploitation Summary
CVE-2001-0500 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 6 public exploits from researchers including Metasploit, hsj, blackangels, including a Metasploit module exploits/windows/iis/ms01_033_idq.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the IDQ ISAPI handler for Microsoft Index Server (CVE-2001-0500). It crafts a malicious HTTP GET request with a long string to trigger the overflow and execute arbitrary shellcode.
Description
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Exploits (6)
This exploit targets a stack buffer overflow in the IDQ ISAPI handler for Microsoft Index Server (CVE-2001-0500). It crafts a malicious HTTP GET request with a long string to trigger the overflow and execute arbitrary shellcode.
This exploit targets CVE-2001-0500, a buffer overflow in the 'idq.dll' ISAPI extension of Microsoft IIS Index Server/Indexing Service. It crafts a malicious HTTP request to execute arbitrary code in the Local System context, leveraging a jmp/call ebx technique and shellcode to establish a reverse connection.
This exploit targets multiple Cisco vulnerabilities, including buffer overflows and DoS attacks. It is designed to test for and exploit vulnerabilities in Cisco IOS and other Cisco products.
This exploit targets CVE-2001-0500, a buffer overflow in the 'idq.dll' ISAPI extension of Windows Index Server/Indexing Service. It sends a maliciously crafted HTTP GET request to execute arbitrary shellcode, potentially granting Local System access.
This exploit targets an unchecked buffer vulnerability in the 'idq.dll' ISAPI extension of Windows Index Server/Indexing Service. It sends a maliciously crafted HTTP GET request with a long string of 'A' characters to trigger a buffer overflow, leading to a Denial of Service (DoS).
This Metasploit module exploits a stack buffer overflow in the IDQ ISAPI handler for Microsoft Index Server (CVE-2001-0500). It crafts a malicious HTTP GET request to trigger the vulnerability and execute arbitrary payloads on vulnerable Windows 2000 systems.