CVE-2009-1122: microsoft internet_information_services Improper Authentication
Vulnerability summary
CVE-2009-1122 is a high (CVSS 7.5) Improper Authentication vulnerability in microsoft internet_information_services. EPSS estimates a 98.45% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 10-06-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
98.45%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 98.45% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundMS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner
auxiliary/scanner/http/dir_webdav_unicode_bypass
Maturity: poc
MS09-020 IIS6 WebDAV Unicode Authentication Bypass
auxiliary/scanner/http/ms09_020_webdav_unicode_bypass
Maturity: poc
Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
1 vendor · 1 product
References
7 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5861VDB EntrySignatureX Refsource OVALThird Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-020Vendor AdvisoryX Refsource MSPatch- www.us-cert.gov/cas/techalerts/TA09-160A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- www.attrition.org/pipermail/vim/2009-June/002192.htmlMailing ListX Refsource VIMThird Party Advisory