PT-2002-2417 · Microsoft · Internet Information Server

Publicado 2002-12-31 · Atualizado 2018-10-30 · CVE-2002-1694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Server (IIS) version 4.0

Description The issue allows remote attackers to modify log file contents while the server is running, due to the log files being opened with FILE SHARE READ and FILE SHARE WRITE permissions.

Recommendations For Microsoft Internet Information Server (IIS) version 4.0, consider restricting access to the log files to prevent modification by remote attackers. As a temporary workaround, restrict write access to the log files until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2002-1694

Produtos afetados

Internet Information Server

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/7919 · Nota
• http://securityfocus.com/bid/3888 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1694 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1694 · Nota de Segurança
• http://online.securityfocus.com/archive/1/250591 · Nota