Description

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

Remediation

References

CVE-2002-1694

Related Vulnerabilities

WordPress Plugin Royal Elementor Addons and Templates Arbitrary File Upload (1.3.78)

WordPress Plugin AddToAny Share Buttons Host Header Injection (1.7.14)

Liferay DXP Excessive Iteration Vulnerability (CVE-2024-25144)

Oracle JRE CVE-2013-5772 Vulnerability (CVE-2013-5772)

PmWiki Other Vulnerability (CVE-2006-4453)

Severity

Medium

Classification

CVE-2002-1694

Tags

Missing Update Known Vulnerabilities