PT-2002-2417 · Microsoft · Internet Information Server

Published 2002-12-31 · Updated 2018-10-30 · CVE-2002-1694

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Server (IIS) version 4.0

Description The issue allows remote attackers to modify log file contents while the server is running, due to the log files being opened with FILE SHARE READ and FILE SHARE WRITE permissions.

Recommendations For Microsoft Internet Information Server (IIS) version 4.0, consider restricting access to the log files to prevent modification by remote attackers. As a temporary workaround, restrict write access to the log files until a more permanent solution is available.

Fix

Related Identifiers

CVE-2002-1694

Affected Products

Internet Information Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1694 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7919 · Note
• http://securityfocus.com/bid/3888 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1694 · Note
• http://online.securityfocus.com/archive/1/250591 · Note