auxiliary/scanner/http/dir_webdav_unicode_bypass

functional

MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner

view exploit source metasploittype auxiliarycatalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-1122UShigh7.5Exploit
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication,…
CVE-2009-1535UShigh7.5Exploit
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, creat…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan