CVE-2009-0094

CVE-2009-0094 describes a vulnerability in the WINS server component of Microsoft Windows 2000 SP4 and Server 2003 SP1/SP2. This flaw allows authenticated attackers to register the "wpad" or "isatap" NetBIOS names, enabling them to hijack Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features. By spoofing a proxy server or ISATAP route, attackers can conduct man-in-the-middle attacks. The vulnerability has a CVSS score of 5.5, indicating a medium severity. It requires authenticated access over the network (AV:N/Au:S) and has low attack complexity (AC:L), with potential impacts to integrity and availability (I:P/A:P). The EPSS score is notably high at 0.60488, suggesting a higher-than-average probability of exploitation. Despite its EPSS score, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, with zero mentions across social media and news articles, which is typical for the vast majority of CVEs.