CVE-2002-1745 in IIS

Riassunto

di MITRE

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 21/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19388
• CPE: pronto
• CWE: CWE-193 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.17663
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Pharma, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1745
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1745
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1745/