CVE-2002-1745: Microsoft Internet Information Services

High severity, CVSS 7.5. EPSS: 19.1% chance of exploitation in the next 30 days.

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

Affected products

• Microsoft Internet Information Services: version 5.0 only

Published 2002-12-31. Last modified 2026-06-16.