CVE coverage
View on NVD →
CVE-2002-0421
CVSS 5.0
2 detections found
IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | GPL EXPLOIT /iisadmpwd/aexp2.htr access | rev 14 | 2024-03-08 |
| snort | GPL EXPLOIT /iisadmpwd/aexp2.htr access | rev 12 | 2012-07-27 |