Description
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
References
- 3888 vdb-entry
- iis-modify-log(7919) vdb-entry
- 20020114 NMRC Advisory: OpenFile Win32 API Log Overwriting/Rewriting mailing-list