CVE-2002-1744
5.0
CVSS v2.0 Base Score
67.26%
MEDIUM RiskEPSS (99th percentile)
NVD-CWE-Other
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
Published: 12/31/2002
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Score (Exploitation Probability)
67.26%MEDIUM Exploitation Risk
99th percentile
This vulnerability has a 67.26% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other