CVE-2002-1744
Microsoft Internet Information Services 5.0 - Directory Traversal via Hex-Encoded Unicode Dot-Dot
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1744. PoCs published by H D Moore.
AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Microsoft IIS 5.0's CodeBrws.asp script, which allows attackers to map out the directory structure using Unicode-encoded traversal sequences. The provided examples demonstrate how to exploit the flaw to access files outside the intended directory.
Description
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Exploits (1)
This is a writeup describing a directory traversal vulnerability in Microsoft IIS 5.0's CodeBrws.asp script, which allows attackers to map out the directory structure using Unicode-encoded traversal sequences. The provided examples demonstrate how to exploit the flaw to access files outside the intended directory.