# CVE-2002-1745

## Summary

- **CVE ID:** CVE-2002-1745
- **Severity:** UNKNOWN
- **CVSS Score:** 0.41
- **CWE:** N/A
- **Published:** Jun 21, 2005
- **Last Modified:** Mar 16, 2026

## Description

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/8853)
- [CNA](http://online.securityfocus.com/archive/1/268303)
- [CNA](http://www.securityfocus.com/bid/4543)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 10.17%
- **EPSS Percentile:** 93.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._