Detections
Analytics
Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)
critical Nessus Plugin ID 10685
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
There's a buffer overflow in the remote web server through the ISAPI filter.It is possible to overflow the remote web server and execute commands as user SYSTEM.
Additionally, other vulnerabilities exist in the remote web server since it has not been patched.
Solution
Apply the patches from the bulletins above.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2001/ms01-033
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2001/ms01-044
Plugin Details
Severity: Critical
ID: 10685
File Name: iis_isapi_overflow.nasl
Version: 1.53
Type: remote
Family: Web Servers
Published: 6/19/2001
Updated: 5/28/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:iis
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/18/2001
Vulnerability Publication Date: 5/6/2001
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (MS01-033 Microsoft IIS 5.0 IDQ Path Overflow)
Reference Information
CVE: CVE-2001-0500, CVE-2001-0506, CVE-2001-0507, CVE-2001-0508, CVE-2001-0544, CVE-2001-0545