Unscored CVE-2002-1180 EUVD-2002-1164GHSA-89mg-cv67-4w52

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM file…

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."

References

N-011 third-party-advisory government-resource
6068 vdb-entry
MS02-062 vendor-advisory
oval:org.mitre.oval:def:931 vdb-entry signature
6071 vdb-entry
iis-script-source-access-bypass(10504) vdb-entry