Lucene search

[email protected]CVE-2002-1694

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1694

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-1694

microsoft

iis

vulnerability

log files

modification

nvd

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.6%

JSON

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

CPENameOperatorVersion
microsoft:internet_information_servicesmicrosoft internet information serviceseq5.0
microsoft:internet_information_servermicrosoft internet information servereq4.0

CPE	Name	Operator	Version
microsoft:internet_information_services	microsoft internet information services	eq	5.0
microsoft:internet_information_server	microsoft internet information server	eq	4.0

References

online.securityfocus.com/archive/1/250591

www.securityfocus.com/bid/3888

exchange.xforce.ibmcloud.com/vulnerabilities/7919

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.6%

JSON