CVE-2002-1694: Medium severity microsoft internet information services vulnerability
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1694?
CVE-2002-1694 is considered a medium severity vulnerability due to the potential for remote attackers to modify log file contents.
How do I fix CVE-2002-1694?
To fix CVE-2002-1694, configure Microsoft Internet Information Server to restrict permissions on log files and ensure they are not set to FILE_SHARE_READ or FILE_SHARE_WRITE.
What versions of Microsoft Internet Information Server are affected by CVE-2002-1694?
CVE-2002-1694 affects Microsoft Internet Information Server versions 4.0 and 5.0.
Can CVE-2002-1694 be exploited remotely?
Yes, CVE-2002-1694 can be exploited remotely by attackers who can access the log files.
What are the potential impacts of exploiting CVE-2002-1694?
Exploiting CVE-2002-1694 may allow attackers to alter log file contents, compromising the integrity of logs and potentially covering up malicious actions.