CVE-2002-1717
Microsoft Internet Information Server 5.1 - Unauthorized Path Information Exposure via _vti_pvt Configuration Files
Title source: llmDescription
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
References (4)
Core 4
Core References
Broken Link mailing-list
x_refsource_bugtraq
http://online.securityfocus.com/archive/1/256125
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8174
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4078
Broken Link mailing-list
x_refsource_bugtraq
http://online.securityfocus.com/archive/1/255555
Scores
EPSS
0.1551
EPSS Percentile
96.4%
Details
CWE
CWE-200
Status
published
Products (1)
microsoft/internet_information_services
5.1
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026