PT-2002-2164 · Microsoft · Internet Information Server
CVE-2002-1180
·
Published
2002-11-12
·
Updated
2018-10-30
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Internet Information Server (IIS) version 5.0
Description:
A typographical error in the script source access permissions does not properly exclude .COM files. This allows attackers with only write permissions to upload malicious .COM files.
Recommendations:
For IIS 5.0, update the script source access permissions to properly exclude .COM files to prevent attackers from uploading malicious files.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Internet Information Server