exploits , vulnerabilities , articles , Microsoft IIS 5.0 WebDAV Authentication Bypass Vulnerability

Title	Microsoft IIS 5.0 WebDAV Authentication Bypass Vulnerability
Published	2009-06-09-12:00AM
Updated	2009-06-11-08:09AM
Class	Access Validation Error
CVE	CVE-2009-1122
Remote	Yes
Local	No
Credit	Yamata Li
Vulnerable	Microsoft IIS 5.0 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Professional Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Server Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 0
Not Vulnerable
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-02 Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
2009-12-02 SafeNet SoftRemote Policy File Handling Remote Buffer Overflow Vulnerabilities
2009-12-02 Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability
2009-12-02 Autodesk Softimage Scene TOC File Remote Code Execution Vulnerability
2009-12-02 Autodesk Maya MEL Script Nodes Remote Command Execution Vulnerability
2009-12-02 Roxio Creator Image Parsing Integer Overflow Vulnerability
2009-12-02 Simple Machines Forum Multiple Security Vulnerabilities
2009-12-01 AWStats Multiple Unspecified Security Vulnerabilities
2009-12-01 TYPO3 simple Glossar Extension Unspecified Cross-Site Scripting and SQL-Injection Vulnerabilities
2009-12-01 TYPO3 Automatic Base Tags for RealUrl Extension Cache Spoofing Vulnerability