QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-1536

Back to search

CVE-2009-1536

Published: Aug 12, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:6393
vdb-entry
signature
x_refsource_OVAL
TA09-223A
third-party-advisory
x_refsource_CERT
ADV-2009-2231
vdb-entry
x_refsource_VUPEN
36127
third-party-advisory
x_refsource_SECUNIA
MS09-036
vendor-advisory
x_refsource_MS
1022715
vdb-entry
x_refsource_SECTRACK
56905
vdb-entry
x_refsource_OSVDB
35985
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now