CVE-2001-0500 CVE-2001-0500

漏洞描述

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

影响产品

微软公司internet_information_server查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

www.cert.orghttp://www.cert.org/advisories/CA-2001-13.html↗www.iss.nethttp://www.iss.net/security_center/static/6705.php↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/191873↗www.securityfocus.comhttp://www.securityfocus.com/bid/2880↗www.ciac.orghttp://www.ciac.org/ciac/bulletins/l-098.shtml↗docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-033↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2017-7269 Windows Server 2003 & IIS 6.0 - Remote Code Execution internet_information_server	严重	9.8	94.4%	PoCEXP	2017/03/27
CVE-2010-1899RCE CVE-2010-1899 IIS internet_information_server	中危	4.3	87.0%	PoCEXP	2010/09/15
CVE-2008-0075RCE CVE-2008-0075 internet_information_server	严重	10.0	72.5%	PoCEXP	2008/02/12
CVE-2006-0026RCE CVE-2006-0026 internet_information_server	中危	6.5	90.1%	PoCEXP	2006/07/11
CVE-2003-0718RCE CVE-2003-0718 IIS internet_information_server	中危	5.0	82.0%	PoCEXP	2004/11/03
CVE-2002-0148 CVE-2002-0148 IIS internet_information_server	高危	7.5	72.5%	PoCEXP	2002/04/22

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞