CVE-2002-1745
High · 7.5CVSS
7.5
EPSS
19.1%
Published
Dec 31, 2002
CISA due date
—
The record
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116735 libpff through 20260926 contains an off-by-one bounds check in… CWE-193
- CVE-2026-115916 vLLM is an inference and serving engine for large language models. CWE-193
- CVE-2026-114460 A flaw was found in mod_qos. CWE-193
- CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instability due… CWE-193
- CVE-2026-42618 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in… CWE-193
- CVE-2026-106584 In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times… CWE-193
- CVE-2026-90781 alsa-lib through 1.2.16.1 contains a stack buffer overflow in the… CWE-193
- CVE-2026-81396 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to… CWE-193