Authentication Bypass in Microsoft IIS 5.0 WebDAV Extension

CVE-2009-1122

Summary

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 Service Pack 4 has a flaw in the way it decodes URLs. This vulnerability allows remote attackers to bypass authentication mechanisms, potentially enabling unauthorized access to read or create files on the server through specially crafted HTTP requests. This significant security issue can expose sensitive information and compromise the integrity of the server's files.

References