CVE-2009-1536 — Improper Input Validation in Microsoft NET Framework

CWE-20 — Improper Input Validation5 documents5 sources
Severity
2.6LOWNVD
EPSS
53.1%
top 2.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedAug 12
Latest updateMay 2

Description

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/net_framework2.0, 3.5+1

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-q2cv-9hv3-xqxf: ASP↗2022-05-02
▶
CVEList
CVE-2009-1536: ASP↗2009-08-12
▶
VulnCheck
Microsoft .NET Framework Improper Input Validation↗2009
▶
CVE-2009-1536 — Improper Input Validation in Microsoft | cvebase