Vulnerability Details CVE-2002-1717
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.129
EPSS Ranking 93.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://online.securityfocus.com/archive/1/255555
- http://online.securityfocus.com/archive/1/256125
- http://www.securityfocus.com/bid/4078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8174
- http://online.securityfocus.com/archive/1/255555
- http://online.securityfocus.com/archive/1/256125
- http://www.securityfocus.com/bid/4078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8174
Products affected by CVE-2002-1717
-
cpe:2.3:a:microsoft:internet_information_services:5.1