Customer Security Bulletin (CSB01-08) : Microsoft (MS01- 033): Unchecked Buffer in Index Server ISAPI Extension Allows IIS Web Server Compromise
All versions of Microsoft Internet Information Services (IIS) Web server software contain a remote buffer overflow vulnerability. The vulnerability lies within the code that allows a Web server to interact with Microsoft Indexing Service functionality. The vulnerable Indexing Service ISAPI filter is installed by default on all versions of IIS. Here's what to do:
Customer Security Bulletin (CSB01-08)