NVD

Id
49754  
Name
CVE-2009-2509  
Description
Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-12-09  
Modified Date
2010-08-21  
Seq
2009-2509  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
251610 49754 CVE-2009-2509 oval:org.mitre.oval:def:6441  View
251611 49754 CVE-2009-2509 MS09-070  View
251612 49754 CVE-2009-2509 TA09-342A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41431 JVNDB-2009-002438 Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性 Microsoft Windows の Active Directory フェデレーションサービスには、HTTP リクエストのヘッダが適切に検証されないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2509 39940 CVE-2009-2509 49754 9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002438.html 2009-12-08 2010-01-22 View