CVE-2009-1536

Опубликовано: 12 авг. 2009

Источник: nvd

CVSS2: 2.6

EPSS Средний

Описание

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."

Ссылки

http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx
Vendor Advisory
http://osvdb.org/56905
Broken Link
http://secunia.com/advisories/36127
Third Party Advisory
http://www.securityfocus.com/bid/35985
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022715
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-223A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2009/2231
Permissions Required
Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393
Third Party Advisory
http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx
Vendor Advisory
http://osvdb.org/56905
Broken Link
http://secunia.com/advisories/36127
Third Party Advisory
http://www.securityfocus.com/bid/35985
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022715
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-223A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2009/2231
Permissions Required
Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:.net_framework:2.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.53089

Средний

2.6 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-q2cv-9hv3-xqxf

github

почти 4 года назад