ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393 | vdb-entry signature x_refsource_OVAL |
| http://www.us-cert.gov/cas/techalerts/TA09-223A.html | third-party-advisory x_refsource_CERT |
| http://www.vupen.com/english/advisories/2009/2231 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/36127 | third-party-advisory x_refsource_SECUNIA |
| http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx | x_refsource_MISC |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036 | vendor-advisory x_refsource_MS |
| http://www.securitytracker.com/id?1022715 | vdb-entry x_refsource_SECTRACK |
| http://osvdb.org/56905 | vdb-entry x_refsource_OSVDB |
| http://www.securityfocus.com/bid/35985 | vdb-entry x_refsource_BID |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6393 | vdb-entry signature x_refsource_OVAL x_transferred |
| http://www.us-cert.gov/cas/techalerts/TA09-223A.html | third-party-advisory x_refsource_CERT x_transferred |
| http://www.vupen.com/english/advisories/2009/2231 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/36127 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://blogs.technet.com/srd/archive/2009/08/11/ms09-035-asp-net-denial-of-service-vulnerability.aspx | x_refsource_MISC x_transferred |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-036 | vendor-advisory x_refsource_MS x_transferred |
| http://www.securitytracker.com/id?1022715 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://osvdb.org/56905 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/bid/35985 | vdb-entry x_refsource_BID x_transferred |