ID
VAR-200212-0468
CVE
CVE-2002-1745
TITLE
Microsoft IIS of CodeBrws.asp In off-by-one Ella - Vulnerability
Trust: 0.8
DESCRIPTION
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files. ------------ This vulnerability information is a comprehensive explanation of multiple vulnerabilities that were published at the same time. Please note that this document contains vulnerability information other than the title. ------------Microsoft IIS 5.0 There is a problem with disclosing the source of the file. Microsoft IIS 5.0 has sample files installed for demonstration purposes. IIS 5.0 of Internet Service Manager One of the sample programs used by codebrws.asp There is a file called. codebrws.asp Due to a flaw in the handling of Unicode characters in this file, an attacker could potentially use this file to obtain the source of files located under the webroot directory. default settings IIS 5.0 Now remotely codebrws.asp Unless you intentionally change the settings, only local attacks will be successful.Please refer to the "Overview" for the impact of this vulnerability. However, this script (CodeBrws.asp) does not adequately filter unicode representations of directory traversals. For example, an attacker can break out of the sample script directory by substituting '%c0%ae%c0%ae' for '..' in a dot-dot-slash directory traversal attack. It has been demonstrated that this issue may be exploited to map out the directory structure of the filesystem on a host running the vulnerable script. However, a flaw exists which will allow an additional character to be added to the file extension. This may allow an attacker to view, for example, .aspx files used by the .NET architecture. If used in conjunction with the issues discussed in BID 4525, this may expose files outside of the sample script directory
Trust: 2.16
AFFECTED PRODUCTS
| vendor: | microsoft | model: | internet information services | scope: | eq | version: | 5.0 | Trust: 1.6 |
| vendor: | マイクロソフト | model: | microsoft iis | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | マイクロソフト | model: | microsoft iis | scope: | eq | version: | 5.0 | Trust: 0.8 |
| vendor: | microsoft | model: | iis | scope: | eq | version: | 5.0 | Trust: 0.6 |
| vendor: | microsoft | model: | internet information server | scope: | eq | version: | 5.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-193 | Trust: 1.0 |
| problemtype: | Determination of boundary conditions (CWE-193) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
network
Trust: 0.6
TYPE
Input Validation Error
Trust: 0.6
PATCH
| title: | Top Page (( 2007/01/04 the current (Information regarding this vulnerability could not be confirmed) | url: | http://www.microsoft.com/ja/jp/default.aspx | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2002-1745 | Trust: 3.2 |
| db: | BID | id: | 4543 | Trust: 2.7 |
| db: | BID | id: | 4525 | Trust: 1.4 |
| db: | JVNDB | id: | JVNDB-2002-000095 | Trust: 0.8 |
| db: | XF | id: | 8853 | Trust: 0.6 |
| db: | NSFOCUS | id: | 2646 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-200212-516 | Trust: 0.6 |
REFERENCES
| url: | http://www.securityfocus.com/bid/4543 | Trust: 2.4 |
| url: | https://exchange.xforce.ibmcloud.com/vulnerabilities/8853 | Trust: 1.0 |
| url: | http://online.securityfocus.com/archive/1/268303 | Trust: 1.0 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2002-1745 | Trust: 0.8 |
| url: | http://www.securityfocus.com/bid/4525 | Trust: 0.8 |
| url: | http://xforce.iss.net/xforce/xfdb/8853 | Trust: 0.6 |
| url: | http://www.nsfocus.net/vulndb/2646 | Trust: 0.6 |
| url: | http://online.securityfocus.com/bid/4525 | Trust: 0.3 |
CREDITS
Chris Anley※ chrisanley@hushmail.com
Trust: 0.6
SOURCES
| db: | BID | id: | 4525 |
| db: | BID | id: | 4543 |
| db: | JVNDB | id: | JVNDB-2002-000095 |
| db: | CNNVD | id: | CNNVD-200212-516 |
| db: | NVD | id: | CVE-2002-1745 |
LAST UPDATE DATE
2025-04-03T22:21:58.991000+00:00
SOURCES UPDATE DATE
| db: | BID | id: | 4525 | date: | 2002-04-16T00:00:00 |
| db: | BID | id: | 4543 | date: | 2002-04-18T00:00:00 |
| db: | JVNDB | id: | JVNDB-2002-000095 | date: | 2024-03-06T02:22:00 |
| db: | CNNVD | id: | CNNVD-200212-516 | date: | 2005-10-20T00:00:00 |
| db: | NVD | id: | CVE-2002-1745 | date: | 2025-04-03T01:03:51.193 |
SOURCES RELEASE DATE
| db: | BID | id: | 4525 | date: | 2002-04-16T00:00:00 |
| db: | BID | id: | 4543 | date: | 2002-04-18T00:00:00 |
| db: | JVNDB | id: | JVNDB-2002-000095 | date: | 2007-04-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-200212-516 | date: | 2002-04-18T00:00:00 |
| db: | NVD | id: | CVE-2002-1745 | date: | 2002-12-31T05:00:00 |