PT-2009-3699 · Microsoft · Internet Security/Acceleration (Isa) Server

Publicado 2009-07-15 · Atualizado 2018-10-12 · CVE-2009-1135

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Security and Acceleration (ISA) Server 2006 versions Gold and SP1

Description The issue allows remote attackers to gain the privileges of an arbitrary account and access published web pages via vectors involving attempted access to a network resource behind the ISA Server when Radius OTP is enabled. This is due to the use of the HTTP-Basic authentication method.

Recommendations For Microsoft Internet Security and Acceleration (ISA) Server 2006 versions Gold and SP1, consider disabling the Radius OTP feature until a fix is available to prevent exploitation. Restrict access to published web pages to minimize the risk of unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1135

Produtos afetados

Internet Security/Acceleration (Isa) Server

Referências · 7

• http://us-cert.gov/cas/techalerts/TA09-195A.html · Nota
• http://secunia.com/advisories/35784 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649 · Nota
• http://securitytracker.com/id?1022547 · Nota
• http://vupen.com/english/advisories/2009/1889 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1135 · Nota de Segurança