medium5.0Public exploit code
CVE-2002-1744
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary fil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS 5.0 - 'CodeBrws.asp' Source Code Disclosure2002-04-16 · remote · windows · Verified
Impact
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Information Services | Version 5.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/267945
- http://online.securityfocus.com/archive/1/268065
- http://www.securityfocus.com/bid/4525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8853
- http://online.securityfocus.com/archive/1/267945
- http://online.securityfocus.com/archive/1/268065
- http://www.securityfocus.com/bid/4525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8853