IIS 4.0 Log File Modification Vulnerability

CVE-2002-1694 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

Learn more about our Cis Benchmark Audit For Microsoft Iis.