Script Source Access Vulnerability in IIS 5.0: Exploiting Typographical Error to Upload Malicious .COM Files

CVE-2002-1180 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."

Learn more about our Cis Benchmark Audit For Microsoft Iis.