CVE-2009-1535
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af (Unicode / character) at an arbitrary position in the URI, as demonstrated by inserting %c0%af into a "/protected/" initial pathname component to bypass the password protection on the protected\ folder, aka "IIS 5.1 and 6.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1122.
La extensión de WebDAV en Microsoft Internet Information Services (IIS) v5.1 y v6.0 permite a atacantes remotos eludir los mecanismos de protección basados en URL, y listar carpetas o leer, crear o modificar archivos, a través de un %c0%af (Unicode / carácter) en una posición arbitraria en la URL, como se ha demostrado mediante la inserción de %c0%af en la ruta inicial de componente "/protected/" para evitar la protección por contraseña en la carpeta protected\ , alias "IIS v5.1 y v6.0 Vulnerabilidad de evasión de autenticación WebDAV".
CVSS Scores
SSVC
- Decision:-
Timeline
- 2009-05-05 CVE Reserved
- 2009-05-15 First Exploit
- 2009-06-10 CVE Published
- 2024-08-07 CVE Updated
- 2024-09-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-287: Improper Authentication
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0135.html | Broken Link | |
| http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0139.html | Broken Link | |
| http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0144.html | Broken Link | |
| http://archives.neohapsis.com/archives/fulldisclosure/2009-05/att-0135/IIS_Advisory.pdf | Broken Link | |
| http://blog.zoller.lu/2009/05/iis-6-webdac-auth-bypass-and-data.html | Third Party Advisory | |
| http://isc.sans.org/diary.html?n&storyid=6397 | Third Party Advisory | |
| http://view.samurajdata.se/psview.php?id=023287d6&page=1 | Broken Link | |
| http://www.attrition.org/pipermail/vim/2009-June/002192.html | Mailing List | |
| http://www.us-cert.gov/cas/techalerts/TA09-160A.html | Third Party Advisory | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6029 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/8704 | 2009-05-15 | |
| https://www.exploit-db.com/exploits/8806 | 2009-05-26 |
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020 | 2020-11-23 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 5.1 Search vendor "Microsoft" for product "Internet Information Services" and version "5.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, professional |
Safe
|
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 5.1 Search vendor "Microsoft" for product "Internet Information Services" and version "5.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp3, professional |
Safe
|
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 6.0 Search vendor "Microsoft" for product "Internet Information Services" and version "6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | - | sp2 |
Safe
|
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 6.0 Search vendor "Microsoft" for product "Internet Information Services" and version "6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | - | sp2, itanium |
Safe
|
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 6.0 Search vendor "Microsoft" for product "Internet Information Services" and version "6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Server 2003 Search vendor "Microsoft" for product "Windows Server 2003" | - | sp2, x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Internet Information Services Search vendor "Microsoft" for product "Internet Information Services" | 6.0 Search vendor "Microsoft" for product "Internet Information Services" and version "6.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, professional, x64 |
Safe
|