CVE-2002-1744 in IIS
Summary
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/21/2005
Disclosure
12/31/2002
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 19387 | Microsoft IIS CodeBrws.asp path traversal | 22 | Proof-of-Concept | Not defined | CVE-2002-1744 |