CVE-2002-1717

CVE-2002-1717 describes an information disclosure vulnerability in Microsoft Internet Information Server (IIS) 5.1. Remote attackers can view sensitive path information by sending specific GET requests to various configuration files within the /_vti_pvt/ directory. With a CVSS score of 5.0, this vulnerability is of medium severity, allowing unauthenticated attackers to gain partial confidentiality impact with low attack complexity. The primary impact is the exposure of internal server paths, which could aid further reconnaissance. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating a degree of awareness despite its age and lack of media coverage.