Description

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Remediation

References

CVE-2002-1745

Related Vulnerabilities

WordPress Plugin Essential Real Estate Cross-Site Scripting (1.7.1)

SugarCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-17314)

Sqlite Improper Resource Shutdown or Release Vulnerability (CVE-2015-3415)

WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7561)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2002-1745