Description

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Remediation

References

CVE-2002-1745

Related Vulnerabilities

CubeCart Session Fixation Vulnerability (CVE-2021-33394)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2362)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8155)

PostgreSQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2017-12172)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-16869)

Severity

Medium

Classification

CVE-2002-1745

Tags

Missing Update Known Vulnerabilities