CVE-2009-1535: Improper Authentication

The WebDAV extension in Microsoft Internet Information Services IIS 5.1 and 6.0 allows remote attackers to bypass URI-based protection mechanisms, and list folders or read, create, or modify files, via a %c0%af Unicode / character at an arbitrary position in the URI, as demonstrated by inserting...