CVE-2002-0422

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.

CVSS v2.0

2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS

44.06% chance of exploitation in the next 30 days, 99th percentile

Published

2002-06-11

Updated

2024-08-08

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/webdav_internal_ip…

References

• CVE Record
• NVD entry

Related

• CVE-2002-0419
• CVE-2002-0430
• CVE-2002-0413
• CVE-2002-0431
• CVE-2002-0406
• CVE-2002-0436