Comments on: Microsoft IIS WebDAV Remote Authentication Bypass http://www.rec-sec.com/2009/05/21/iis-webdav-auth-bypass/ a non-profit information security web site authored by Moshe Ben Abu (Trancer), focusing on vulnerability research, exploit development (mainly for the Metasploit Framework), web application security, information security and hacking news from around the world. Wed, 21 Jul 2010 17:11:36 +0000 http://www.rec-sec.com hourly 1 By: Trancer http://www.rec-sec.com/2009/05/21/iis-webdav-auth-bypass/comment-page-1/#comment-996 Trancer Tue, 09 Jun 2009 23:09:44 +0000 http://www.rec-sec.com/?p=531#comment-996 CVE's: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1122 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1535 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1676 CVE’s:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1122
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1535
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1676

]]> By: Amit http://www.rec-sec.com/2009/05/21/iis-webdav-auth-bypass/comment-page-1/#comment-964 Amit Thu, 21 May 2009 09:26:12 +0000 http://www.rec-sec.com/?p=531#comment-964 nice ! cool exploit nice ! cool exploit

]]> By: Trancer http://www.rec-sec.com/2009/05/21/iis-webdav-auth-bypass/comment-page-1/#comment-962 Trancer Wed, 20 May 2009 23:49:42 +0000 http://www.rec-sec.com/?p=531#comment-962 On the Microsoft security advisory 971492, CVE-2009-1535 is registered for this vulnerability. Meanwhile, CVE-2009-1676 is also registered for the IIS WebDAV Unicode vulnerability. On the Microsoft security advisory 971492, CVE-2009-1535 is registered for this vulnerability. Meanwhile, CVE-2009-1676 is also registered for the IIS WebDAV Unicode vulnerability.

]]>