CVE-2002-1744: Microsoft Internet Information Services

Medium severity, CVSS 5.0. EPSS: 65.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).

Affected products

• Microsoft Internet Information Services: version 5.0 only

Published 2002-12-31. Last modified 2026-06-16.