CVE-2001-0500: Microsoft Index Server

High severity, CVSS 10.0. EPSS: 96.7% chance of exploitation in the next 30 days.

Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.

Affected products

• Microsoft Index Server: version 2.0 only
• Microsoft Indexing Service: any version
• Microsoft Internet Information Server: up to and including 6.0

Published 2001-07-21. Last modified 2026-06-16.