Vulnerabilities > CVE-2002-1744 - Unspecified vulnerability in Microsoft Internet Information Services 5.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
microsoft
exploit available
NVD
Published: 2002-12-31
Updated: 2018-10-30

Summary

Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).

Vulnerable Configurations

Part Description Count
Application
Microsoft
1

Exploit-Db

descriptionMicrosoft IIS 5.0 CodeBrws.ASP Source Code Disclosure Vulnerability. CVE-2002-1744. Remote exploit for windows platform
idEDB-ID:21385
last seen2016-02-02
modified2002-04-16
published2002-04-16
reporterH D Moore
sourcehttps://www.exploit-db.com/download/21385/
titleMicrosoft IIS 5.0 CodeBrws.ASP Source Code Disclosure Vulnerability

References