CVE-2009-2509

🗓️ 09 Dec 2009 18:30:00Reported by [email protected]Type

Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability.

Reporter	Title	Published	Views	Family All 10
Check Point Advisories	Microsoft Active Directory Federation Services Code Execution (MS09-070; CVE-2009-2509)	8 Dec 200900:00	–	checkpoint_advisories
CVE	CVE-2009-2509	9 Dec 200918:00	–	cve
Cvelist	CVE-2009-2509	9 Dec 200918:00	–	cvelist
OpenVAS	Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)	9 Dec 200900:00	–	openvas
OpenVAS	Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)	9 Dec 200900:00	–	openvas
Prion	Remote code execution	9 Dec 200918:30	–	prion
securityvulns	Microsoft Security Bulletin MS09-070 - Important Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)	9 Dec 200900:00	–	securityvulns
securityvulns	Microsoft Windows Active Directory Federation Service multiple security vulnerabilities	9 Dec 200900:00	–	securityvulns
Tenable Nessus	MS09-070: Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution (971726)	8 Dec 200900:00	–	nessus
seebug.org	Microsoft ADFS服务请求头验证远程代码执行漏洞（MS09-070）	12 Dec 200900:00	–	seebug

NVD

Node

microsoft windows_server_2003sp2

microsoft windows_server_2008x32

microsoft windows_server_2008x64

microsoft windows_server_2008sp2x32

microsoft windows_server_2008sp2x64

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6441
us-cert	www.us-cert.gov/cas/techalerts/TA09-342A.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-070

23 Apr 2026 00:35Current

7.3High risk

Vulners AI Score7.3

CVSS 29

EPSS0.26761

CWE-20