You're in: Panda Security > Home Users > security-info > about-malware > encyclopedia > overview
Active Scan. Scan your PC free
Panda Security Product Line 2012

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

MS09-020

 
Threat LevelLow threatDamageHighDistributionNot widespread
Common name:MS09-020
Technical name:MS09-020
Threat level:Medium
Alias:Vulnerabilities in Internet Information Services (IIS) Could Allow Elevation of Privilege, Vulnerabilidades en Internet Information Services (IIS) podr�a permitir la elevaci�n de privilegios
Type:Vulnerability
Effects:  

It is a group of important vulnerabilities in Internet Information Services (IIS) on Windows 2003/XP/2000 computers, which allows local privilege escalation in the vulnerable computer.

Affected platforms:

Other

First detected on:June 10, 2009
Detection updated on:June 11, 2009
StatisticsNo

Brief Description 

    

MS09-020 is not categorized as virus, worm, Trojan or backdoor. It is a group of important vulnerabilities in Internet Information Services, which allows local privilege escalation in the vulnerable computer.

The affected components are:

  • Internet Information Services 5.0 on Windows 2000.
  • Internet Information Services 5.1 on Windows XP.
  • Internet Information Services 6.0 on Windows 2003/XP.

 

If exploited successfully, MS09-020 allows to gain unauthorized privileges on a computer or network. An example of privilege elevation would be an unprivileged user who could manage to be added to the Administrator's group. In such case, the hacker could take complete control of the system: create, modify or delete files, install programs, create new user accounts, etc.

This vulnerability is exploited by running a specially crafted HTTP request to a website that requires authentication.

 

If you have any of the vulnerable components installed on your computer, it is recommended to download and apply the security patch for this vulnerability. Click here to access the web page for downloading the patch.