EDB-8806

functional

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)

view exploit source exploit_dbverifiedtype remoteauthor ka0xpublished 2009-05-26catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-1122UShigh7.5Exploit
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication,…
CVE-2009-1535UShigh7.5Exploit
The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, creat…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan