Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2009-1135

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ISA Server是微软产品家族之一，可以提供企业防火墙和高性能的Web缓存 。 如果对ISA Server 2006配置了使用RADIUS OTP的基于表单认证(FBA)，则当该服务器从用户代理接收到请求要求回退到HTTP-Basic认证时，ISA就无法正确地认证该请求。如果配置了KCD，ISA会继续对已发布的服务器使用KCD进行认证。对于知道管理员账号用户名的攻击者，成功利用这个漏洞可以完全控制依赖ISA Server 2006 Web发布规则进行认证的系统。攻击者随后可安装程序；查看、更改或删除数

AI Predicted 7.5 Difficulty: Moderate EPSS 26.45% · P98

Possible ATT&CK Techniques 1 AI

T1567 · Exfiltration Over Web Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-1135

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft ISA Server绕过Radius OTP认证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ISA Server是微软产品家族之一，可以提供企业防火墙和高性能的Web缓存 。 如果对ISA Server 2006配置了使用RADIUS OTP的基于表单认证(FBA)，则当该服务器从用户代理接收到请求要求回退到HTTP-Basic认证时，ISA就无法正确地认证该请求。如果配置了KCD，ISA会继续对已发布的服务器使用KCD进行认证。对于知道管理员账号用户名的攻击者，成功利用这个漏洞可以完全控制依赖ISA Server 2006 Web发布规则进行认证的系统。攻击者随后可安装程序；查看、更改或删除数
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2009-1135

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1135

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-1135 (6)

Same Patch Batch · n/a · 2009-07-15 · 9 CVEs total

CVE-2009-0231 Microsoft Windows EOT字体引擎堆溢出和整数溢出漏洞
CVE-2009-0232 Microsoft Windows EOT字体引擎堆溢出和整数溢出漏洞
CVE-2009-0566 Microsoft Office Publisher指针引用代码执行漏洞
CVE-2009-1136 Microsoft Office Spreadsheet ActiveX控件内存破坏漏洞
CVE-2009-1538 Microsoft DirectX DirectShow指针验证远程代码执行漏洞
CVE-2009-1539 Microsoft DirectX长度记录解析内存破坏漏洞
CVE-2009-1542 Microsoft Virtual PC和Virtual Server本地权限提升漏洞
CVE-2009-2477 Mozilla Firefox Tracemonkey组件远程代码执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-1135

No comments yet

Leave a comment