Description

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

Remediation

References

CVE-2002-1694

Related Vulnerabilities

Jenkins Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2017-1000503)

Claroline Other Vulnerability (CVE-2005-1377)

Oracle JRE CVE-2013-2425 Vulnerability (CVE-2013-2425)

WordPress Plugin McAvoy Cross-Site Scripting (0.1.0)

IBM WebSEAL Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-1803)

Severity

Medium

Classification

CVE-2002-1694

Tags

Missing Update Known Vulnerabilities