CVE-2009-4444 File upload in n/a
Remote attackers can bypass file extension restrictions in IIS to upload malicious scripts, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2009-4444?
CVE-2009-4444 is a medium-severity vulnerability in Microsoft Internet Information Services, published on 29 Dec 2009. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a filename with a (1) .asp, (2) .cer, or (3) .asa first extension, followed by a semicolon and a safe extension, as demonstrated by the use of asp.dll to handle a .asp;.jpg file.
Which versions are affected by CVE-2009-4444?
It affects 1 product.
Products include Microsoft Internet Information Services.
How do I fix CVE-2009-4444?
No fix has been published for CVE-2009-4444 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-4444 being exploited?
There is no known exploitation of CVE-2009-4444 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Internet Information Services
- CVE-2017-7269 Microsoft Windows Server Buffer Overflow
- CVE-2010-3972 Memory corruption in n/a
- CVE-2008-4301 Other in n/a
- CVE-2007-2815 The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL
- CVE-2003-0224 Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa
Sources
Also known as GHSA-4jh7-wh4m-f4pq.