Vulnerability in Microsoft Internet Information Services
CVE-2002-1180
A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."
EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_information_services — versions 5.0
- N/a — versions n/a
References
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)