Published: 31/12/2002 Updated: 30/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Subscribe to Internet Information Services

Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote malicious users to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet information services 5.0

source: wwwsecurityfocuscom/bid/4525/info Microsoft IIS 50 ships with a sample script that may be used to view the source code of other scripts in the sample scripts (/IISSAMPLES) directory However, this script (CodeBrwsasp) does not adequately filter unicode representations of directory traversals For example, an attacker can break o ...

NVD-CWE-Other http://online.securityfocus.com/archive/1/267945 http://online.securityfocus.com/archive/1/268065 http://www.securityfocus.com/bid/4525 https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 https://nvd.nist.gov https://www.exploit-db.com/exploits/21385/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1744

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect