CVE ID:	CVE-2002-1180
Description:	A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1180 BugTraq ID: 6068 http://www.securityfocus.com/bid/6068 BugTraq ID: 6071 http://www.securityfocus.com/bid/6071 Computer Incident Advisory Center Bulletin: N-011 http://www.ciac.org/ciac/bulletins/n-011.shtml Microsoft Security Bulletin: MS02-062 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931 XForce ISS Database: iis-script-source-access-bypass(10504) http://www.iss.net/security_center/static/10504.php