CVE-2002-1745

CVE-2002-1745 describes an off-by-one error in the CodeBrws.asp sample script within Microsoft IIS 5.0. This flaw allows remote attackers to view the source code of files with specific extensions, such as .aspx, by appending an extra character to common file extensions like .html or .asp. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a high-severity issue. It is easily exploitable over the network with low attack complexity and no user interaction required, leading to a complete compromise of confidentiality (source code disclosure). Despite its age and severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. Community discussion and media coverage are minimal, suggesting it has not garnered significant attention.