CVE-2002-0075: High severity Microsoft Internet Information Server vulnerability
Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0075?
CVE-2002-0075 is classified as a critical vulnerability due to its potential for remote exploitation.
How do I fix CVE-2002-0075?
To fix CVE-2002-0075, upgrade to a later version of Internet Information Server that is not affected, such as version 6.0 or later.
What systems are affected by CVE-2002-0075?
CVE-2002-0075 affects Internet Information Server (IIS) versions 4.0, 5.0, and 5.1.
What kind of attacks can be executed via CVE-2002-0075?
CVE-2002-0075 allows attackers to execute arbitrary scripts in the context of other users through a cross-site scripting (XSS) attack.
Is there a workaround for CVE-2002-0075 if upgrading is not feasible?
There is no specific workaround for CVE-2002-0075 other than applying appropriate security measures such as input validation and sanitization.