CVE-2009-0089

Windows HTTP Services - Certificate Validation Bypass via DNS Spoofing

Title source: llm
STIX 2.1

Description

Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate matching its own domain name, but not a certificate matching the domain name of the host requested by the user, aka "Windows HTTP Services Certificate Name Mismatch Vulnerability."

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34437
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6027
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34677
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022041
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1027

Scores

EPSS 0.0507
EPSS Percentile 91.3%

Details

CWE
CWE-20
Status published
Products (5)
microsoft/windows_2000
microsoft/windows_server_2003 (4 CPE variants)
microsoft/windows_server_2008 (3 CPE variants)
microsoft/windows_vista (3 CPE variants)
microsoft/windows_xp (4 CPE variants)
Published Apr 15, 2009
Tracked Since Feb 18, 2026