CVE-2009-1122: High severity microsoft internet information services (iis) vulnerability
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1122?
CVE-2009-1122 is classified as a high severity vulnerability due to its potential to allow authentication bypass and unauthorized file access.
How do I fix CVE-2009-1122?
To fix CVE-2009-1122, it is recommended to upgrade from Microsoft Internet Information Services 5.0 to a more secure version, as there are no specific patches for this vulnerability.
What are the potential impacts of CVE-2009-1122?
The potential impacts of CVE-2009-1122 include unauthorized access to read or create files on the server due to the WebDAV authentication bypass.
What systems are affected by CVE-2009-1122?
CVE-2009-1122 specifically affects Microsoft Internet Information Services 5.0 running on Windows 2000 SP4.
Is CVE-2009-1122 still a threat today?
While CVE-2009-1122 primarily affected older systems, any remaining installations of IIS 5.0 may still be at risk if they have not been properly secured or decommissioned.