CVE-2002-1745

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Средний

Описание

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Ссылки

http://online.securityfocus.com/archive/1/268303
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/4543
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/8853
Third Party Advisory
VDB Entry
http://online.securityfocus.com/archive/1/268303
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/4543
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/8853
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10167

Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-193

Связанные уязвимости

GHSA-jjmp-8hhm-x9wh