CVE-2002-1744 in IIS
Сводка (Английский)
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Резервировать
21.06.2005
Раскрытие
31.12.2002
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 19387 | Microsoft IIS CodeBrws.asp обход каталога | 22 | Доказательство концепции | Не определено | CVE-2002-1744 |