Microsoft IIS / Site Server codebrws.asp Arbitrary Source Disclosure

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. %NASLMINLEVEL 70300 This script...

CVE-1999-0739

The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...

CVE-1999-0739

The CVE-1999-0739 issue affects Microsoft IIS (and Site Server) where the Codebrws.asp sample file enables remote disclosure of arbitrary files in the web root. Root cause: improper handling in the codebrws.asp sample allows viewing source of files with .asp/.inc/.htm/.html extensions. Impact: re...

CVE-1999-0739

The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files...