CVE-2002-1744 Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" strin...
MediumCVSS 5.0
EPSS 65.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet information services | = 5.0 | No fix listed |
References
- 20020417 Microsoft IIS 5.0 CodeBrws.asp Source Disclosure mailing-list
- 20020417 Re: Microsoft IIS 5.0 CodeBrws.asp Source Disclosure mailing-list
- 4525 exploit vdb-entry
- iis-codebrws-view-source(8853) vdb-entry