Description
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
MS01-033 Microsoft IIS 5.0 IDQ Path Overflow
exploit/windows/iis/ms01_033_idq
Exploit-DB 5
- Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit) EDB-16472 · remote · Jun 15, 2010 · verified
- Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (2) EDB-20931 · remote · Jun 21, 2001 · verified
- Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (PoC) EDB-20930 · dos · Jun 18, 2001 · verified
- Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (3) EDB-20932 · remote · Jun 18, 2001 · verified
- Microsoft Index Server 2.0 / Indexing Service (Windows 2000) - ISAPI Extension Buffer Overflow (4) EDB-20933 · remote · Jun 18, 2001 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- MS01-033 vendor-advisory
- 20010618 All versions of Microsoft Internet Information Services, Remote buffer overflow (SYSTEM Level Access) mailing-list
- 2880 vdb-entry
- L-098 third-party-advisory government-resource
- iis-isapi-idq-bo(6705) vdb-entry
- oval:org.mitre.oval:def:197 vdb-entry signature
- CA-2001-13 third-party-advisory