CVE-2001-0902
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that...
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
Exploit likelihood
What each source reports
NVD Score used
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
- Record
CVE-2001-0902- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
- Record
CVE-2001-0902- Updated
- 2026-11-02
EUVDEUVD-2001-0885 No score
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
- Record
EUVD-2001-0885- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-48gm-cgg2-2h2w No score
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that...
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
- Record
GHSA-48gm-cgg2-2h2w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0902 is a high vulnerability (CVSS 7.5) in Microsoft Internet Information Services, published November 20, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.6%, the 97th percentile. No source names a fixed version.