CVE-2002-1745

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-08-08

Weaknesses

CWE-193

Affected products

• Internet Information Services (Microsoft)

References

• http://online.securityfocus.com/archive/1/268303
• http://www.securityfocus.com/bid/4543
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8853