Description
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2008-7235 Vulnerability (CVE-2008-7235)
Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585)
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)
WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.14)
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.19)