CVE-2002-0073: The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established...

Security readout for executives and security teams

CVE-2002-0073 is a denial-of-service flaw in the Microsoft IIS FTP service. A remote party that can establish an FTP session may be able to disrupt the service using a specially crafted status request. The sources do not indicate data theft, code execution, or confirmed active exploitation. Exposure is most likely in legacy environments still running IIS 4.0, 5.0, or 5.1 FTP service, especially where FTP is reachable by untrusted users or the internet. Systems not running the IIS FTP service are not implicated by the provided sources. Treat this as a legacy service availability risk. It is not presented as a breach-enabling flaw, but exposed FTP on obsolete IIS versions can still create operational disruption and audit concern. Prioritize remediation where FTP is internet-facing or business-critical. Mitigation focus: Review Microsoft MS02-018 and apply the vendor-recommended update where applicable.; Disable the IIS FTP service if it is not required.; Restrict FTP access to trusted networks and known users..

Prepared

Jun 30, 2026, 15:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.