{"vulnerability": "cve-2009-1122", "sightings": [{"uuid": "5e0d3e14-2271-4eb1-a5e7-bd1173fbe8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "348ed145-3558-4378-a03b-fc68207499ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:36.000000Z"}, {"uuid": "eb5d9264-c2f8-45a7-8bca-e8e7fb2cb787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dir_webdav_unicode_bypass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "229eef96-1b40-4808-a02c-087066e434a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/ms09_020_webdav_unicode_bypass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b2bc598e-1413-4d2f-b677-a8d7b71322bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-1122", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8806", "content": "", "creation_timestamp": "2009-05-26T00:00:00.000000Z"}, {"uuid": "91150d0f-dc62-4506-9fdf-1ef83d447f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dir_webdav_unicode_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module is based on et's HTTP Directory Scanner module,\\n          with one exception. Where authentication is required, it attempts\\n          to bypass authentication using the WebDAV IIS6 Unicode vulnerability\\n          discovered by Kingcope. The vulnerability appears to be exploitable\\n          where WebDAV is enabled on the IIS6 server, and any protected folder\\n          requires either Basic, Digest or NTLM authentication.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/dir_webdav_unicode_bypass\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/dir_webdav_unicode_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/dir_webdav_unicode_bypass\", \"references\": [\"MSB-MS09-020\", \"CVE-2009-1535\", \"CVE-2009-1122\", \"OSVDB-54555\", \"BID-34993\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.395031Z"}, {"uuid": "498287be-51bd-4d18-8ec7-c086bdee3363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-1122", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/ms09_020_webdav_unicode_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"et \", \"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to to bypass authentication using the WebDAV IIS6\\n          Unicode vulnerability discovered by Kingcope. The vulnerability appears\\n          to be exploitable where WebDAV is enabled on the IIS6 server, and any\\n          protected folder requires either Basic, Digest or NTLM authentication.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/ms09_020_webdav_unicode_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"MS09-020 IIS6 WebDAV Unicode Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/ms09_020_webdav_unicode_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/ms09_020_webdav_unicode_bypass\", \"references\": [\"MSB-MS09-020\", \"CVE-2009-1535\", \"CVE-2009-1122\", \"OSVDB-54555\", \"BID-34993\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:37.432754Z"}]}