CVE-2002-1180

no score yetEPSS 9.7%

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."

EPSS: 9.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2002-11-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_information_services

References

http://www.ciac.org/ciac/bulletins/n-011.shtml
http://www.iss.net/security_center/static/10504.php
http://www.securityfocus.com/bid/6068
http://www.securityfocus.com/bid/6071
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062

Check your stack JSON