CVEvulnerability
CVE-2002-1180
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-11-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."
Affected configurations
• microsoft internet information services 5.0
References
- http://www.ciac.org/ciac/bulletins/n-011.shtml www.ciac.org
- http://www.iss.net/security_center/static/10504.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/6068 www.securityfocus.com
- http://www.securityfocus.com/bid/6071 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931 oval.cisecurity.org
- http://www.ciac.org/ciac/bulletins/n-011.shtml www.ciac.org
- http://www.iss.net/security_center/static/10504.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/6068 www.securityfocus.com
- http://www.securityfocus.com/bid/6071 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931 oval.cisecurity.org