NVD

Id
48419  
Name
CVE-2009-1122  
Description
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2010-08-21  
Seq
2009-1122  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
243789 48419 CVE-2009-1122 oval:org.mitre.oval:def:5861  View
243790 48419 CVE-2009-1122 20090616 IIS WebDav Vulnerability CVE ID  View
243791 48419 CVE-2009-1122 MS09-020  View
243792 48419 CVE-2009-1122 35232  View
243793 48419 CVE-2009-1122 1022358  View
243794 48419 CVE-2009-1122 TA09-160A  View
243795 48419 CVE-2009-1122 ADV-2009-1539  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40781 JVNDB-2009-001787 Windows 上で稼働している Microsoft IIS の WebDAV 拡張における認証を回避される脆弱性 Windows 上で稼働している Microsoft Internet Information Services (IIS) の WebDAV 拡張には、URL を正しくデコードしないため、認証を回避され、ファイルを読まれるまたは作成される脆弱性が存在します。 CVE-2009-1122 38553 CVE-2009-1122 48419 7.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001787.html 2009-06-09 2009-07-22 View