CVE-2002-0148: High severity Microsoft Internet Information Services vulnerability
Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0148?
CVE-2002-0148 is a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary scripts on affected systems.
How do I fix CVE-2002-0148?
To fix CVE-2002-0148, it is recommended to upgrade to a secure version of Microsoft Internet Information Services or apply the latest security patches provided by Microsoft.
Which software versions are affected by CVE-2002-0148?
CVE-2002-0148 affects Microsoft Internet Information Server versions 4.0, 5.0, and 5.1.
What type of attack is possible with CVE-2002-0148?
CVE-2002-0148 allows for cross-site scripting attacks that can compromise user sessions or manipulate web page content.
Is there a workaround for CVE-2002-0148?
A possible workaround for CVE-2002-0148 is to disable the error page functionality or restrict the use of scripts on HTTP error pages.