Test ID:	1.3.6.1.4.1.25623.1.0.903045
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)
Summary:	This host is missing an important security update according to; Microsoft Bulletin MS11-079.
Description:	Summary: This host is missing an important security update according to Microsoft Bulletin MS11-079. Vulnerability Insight: The flaws are due to: - when Forefront Unified Access Gateway (UAG) does not properly handle script contained in a specially crafted request, allowing for malicious content to be reflected back to the user. - by an error within the MicrosoftClient.jar Java applet insecurely implements certain methods. - by improper validation of a NULL value contained within the session cookie. Vulnerability Impact: Successful exploitation could allow attackers to conduct cross-site scripting and HTTP response splitting attacks, cause a denial of service. Affected Software/OS: - Microsoft Forefront Unified Access Gateway 2010 - Microsoft Forefront Unified Access Gateway 2010 Update 1 - Microsoft Forefront Unified Access Gateway 2010 Update 2 - Microsoft Forefront Unified Access Gateway 2010 Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1895 BugTraq ID: 49979 http://www.securityfocus.com/bid/49979 Microsoft Security Bulletin: MS11-079 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 http://osvdb.org/76235 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13064 Common Vulnerability Exposure (CVE) ID: CVE-2011-1896 http://osvdb.org/76233 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12197 Common Vulnerability Exposure (CVE) ID: CVE-2011-1897 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13039 Common Vulnerability Exposure (CVE) ID: CVE-2011-1969 BugTraq ID: 49983 http://www.securityfocus.com/bid/49983 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13032 Common Vulnerability Exposure (CVE) ID: CVE-2011-2012 BugTraq ID: 49980 http://www.securityfocus.com/bid/49980 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12799
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.