PT-2011-3511 · Microsoft · Forefront Unified Access Gateway (Uag) 2010

Elisabeth Demeter · Publicado 2011-10-12 · Atualizado 2018-10-12 · CVE-2011-1969

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway (UAG) 2010 versions Gold through SP1

Description The issue allows remote attackers to execute arbitrary code on client machines via unspecified vectors. This is related to the MicrosoftClient.jar file containing a signed Java applet.

Recommendations For Microsoft Forefront Unified Access Gateway (UAG) 2010 versions Gold through SP1, consider disabling the use of the MicrosoftClient.jar file until a patch is available. Restrict access to the Java applet to minimize the risk of exploitation.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-1969

Produtos afetados

Forefront Unified Access Gateway (Uag) 2010

Referências · 4

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13032 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 · Aviso do Fabricante
• http://securityfocus.com/bid/49983 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1969 · Nota de Segurança