Intrusion PreventionMS.IIS.ISAPI.Extension.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Microsoft Internet Information Services.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. As a result, a remote attacker can exploit this to execute arbitrary code within the context of the application.
Affected Products
Microsoft Index Server 2.0
Indexing Service in Windows 2000
Microsoft IIS 5.0
Microsoft IIS 4.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems
Recommended Actions
Refer to the vendor's website for suggested workaround.
http://technet.microsoft.com/en-us/security/bulletin/ms01-033
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-01-30 | 14.537 | Sig Added |
| ID | 30400 |
| Created | Dec 22, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2001-0500 |
| Exploit Prediction Score | 96.73% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | IIS |