CVE-2002-1180: Microsoft Internet Information Services

High severity, CVSS 7.5. EPSS: 9.7% chance of exploitation in the next 30 days.

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."

Affected products

• Microsoft Internet Information Services: version 5.0 only

Published 2002-11-12. Last modified 2026-06-16.