CVE:CVE-2009-2509
CNNVD:CNNVD-200912-112
Microsoft Windows Server 2003 SP2和Server 2008 Gold以及SP2中的Active Directory Federation Services (ADFS)不能正确确认HTTP请求的页眉，使远程验证用户借助对一个IIS web服务器的人工请求执行任意代码，称为"ADFS漏洞的远程代码执行"。
solution:Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,and avoid the version *:sp2