Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1744

EPSS 67.26% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1744

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft IIS示例脚本CodeBrws.asp远程读取特定脚本源码漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft IIS(Internet Information Server)是MS Windows系统默认自带的Web服务器软件。 IIS 5.0默认自带的示例脚本文件CodeBrws.asp对用户输入没有正确过滤，远程攻击者可能利用此漏洞读取Web主目录内任意以.asp、.inc、.htm和.html为后缀的文件。 问题在于CodeBrws.asp脚本中虽然对提交给它参数的路径信息中检查是否包含了".."串，但没有考虑到Unicode的可能，远程攻击者可能提交".."串的Unicode表示方式"
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1744

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1744

Please Login to view more intelligence information

Same Patch Batch · n/a · 2005-06-21 · 163 CVEs total

CVE-2002-1754Novell NetWare Client缓冲区溢出漏洞
CVE-2002-1743Mirabilis ICQ .hpf本地拒绝服务攻击漏洞
CVE-2002-1745Microsoft IIS CodeBrws.ASP检查文件扩展名不当漏洞
CVE-2002-1746Vtun漏洞
CVE-2002-1747Vtun数据安全受到威胁
CVE-2002-1748Slashcode登录任意用户帐号漏洞
CVE-2002-1749Microsoft Windows 2000务器终端服务故障锁定终端漏洞
CVE-2002-1750CSGuestbook可远程执行任意命令漏洞
CVE-2002-1751CSLiveSupport远程执行任意命令漏洞
CVE-2002-1752CSChat-R-Box远程执行任意命令漏洞
CVE-2002-1753CSNews Professional远程执行任意命令漏洞
CVE-2002-1759PHPProjekt本地文件可读取漏洞
CVE-2002-1763Solaris 8 dtscreen认证可绕过漏洞
CVE-2002-1762Microsoft Baseline Security Analyzer报告文件明文存放漏洞
CVE-2002-1761PHProjekt目录遍历漏洞
CVE-2002-1760PHPProjekt可插入SQL命令漏洞
CVE-2002-1757PHPProjekt登录可绕过漏洞
CVE-2002-1755tinc 1.0pre3 和 1.0pre4 VPN数据漏洞
CVE-2002-1756ACD Systems ACDSee Photo Album文件描述缓冲区溢出漏洞
CVE-2002-1742SOAP::Lite远程任意命令可执行漏洞

Showing top 20 of 163 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1744

No comments yet

Leave a comment