PT-2009-6565 · Microsoft · Internet Information Services

Publicado 2009-12-29 · Atualizado 2020-11-23 · CVE-2009-4444

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Information Services (IIS) versions 5.x through 6.x

Description The issue allows remote attackers to bypass intended extension restrictions of third-party upload applications. This is achieved by using a filename with a first extension such as .asp, .cer, or .asa, followed by a semicolon and a safe extension. For example, using asp.dll to handle a .asp;.jpg file.

Recommendations For Microsoft Internet Information Services (IIS) versions 5.x through 6.x, consider configuring the server to handle file extensions more securely, such as by ignoring any characters after a semicolon in filenames. As a temporary workaround, restrict the use of sensitive extensions like .asp, .cer, or .asa in upload applications until a more robust solution is implemented.

Correção

Identificadores relacionados

CVE-2009-4444

Produtos afetados

Internet Information Services

Referências · 10

• http://blogs.technet.com/msrc/archive/2009/12/27/new-reports-of-a-vulnerability-in-iis.aspx · Nota
• http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf · Nota
• http://securityfocus.com/bid/37460 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4444 · Nota
• https://t.me/cvenotify/6033 · Publicação no Telegram
• http://securitytracker.com/id?1023387 · Nota
• https://t.me/cvenotify/6039 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2009-4444 · Nota de Segurança
• http://vupen.com/english/advisories/2009/3634 · Nota
• http://secunia.com/advisories/37831 · Nota