$ cve CVE-2001-0241 JSON

CVE-2001-0241 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 85.7% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	85.7% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2001-06-27
Last modified	2026-06-16

Affected (1)

Vendor	Product
microsoft	windows 2000

Public exploits

Source	Title	Date
exploit-db	Microsoft IIS 5.0 - Printer Host Header Overflow (MS01-023) (Metasploit)	2010-04-30
exploit-db	Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (3)	2005-02-02
exploit-db	Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (2)	2001-05-08
exploit-db	Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (1)	2001-05-07
exploit-db	Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (1)	2001-05-01
exploit-db	Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (2)	2001-05-01
exploit-db	Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (4)	2001-05-01

References

→ the Explorer · watch your stack · NVD