NetSight
medium5.0

CVE-2002-1694

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to mo…

Impact

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

Affected products

VendorProductAffected versions
MicrosoftInternet Information Server
Version 4.0
MicrosoftInternet Information Services
Version 5.0

References