← All CVEs

CVE-2002-1694

medium · 5

Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.

5
CVSS
13.0%
EPSS (exploit prob.)
96th
EPSS percentile
2002-12-31
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

VendorProductAffected versions
microsoftinternet_information_server4.0
microsoftinternet_information_server4.0
microsoftinternet_information_services5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-1694