Unrated severityNVD Advisory· Published Jul 15, 2009· Updated Jun 16, 2026
CVE-2009-1135
CVE-2009-1135
Description
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*
- Range: 2006 Gold, SP1
Patches
Vulnerability mechanics
References
6- www.us-cert.gov/cas/techalerts/TA09-195A.htmlnvdUS Government Resource
- secunia.com/advisories/35784nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2009/1889nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649nvd
News mentions
0No linked articles in our index yet.