CVE-2002-0422

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a…

published June 11, 2002

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
51%
Percentile
98.9
In the wild
Unconfirmed
What it is

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51038 · 98.9th percentile
Published
2002-06-11T04:00Z
EPSS history
Timeline
  • 11 JUN 04:00Z
    IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a…
    cvelistv5