PT-2009-3699 · Microsoft · Internet Security/Acceleration (Isa) Server

Published 2009-07-15 · Updated 2018-10-12 · CVE-2009-1135

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Security and Acceleration (ISA) Server 2006 versions Gold and SP1

Description The issue allows remote attackers to gain the privileges of an arbitrary account and access published web pages via vectors involving attempted access to a network resource behind the ISA Server when Radius OTP is enabled. This is due to the use of the HTTP-Basic authentication method.

Recommendations For Microsoft Internet Security and Acceleration (ISA) Server 2006 versions Gold and SP1, consider disabling the Radius OTP feature until a fix is available to prevent exploitation. Restrict access to published web pages to minimize the risk of unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-1135

Affected Products

Internet Security/Acceleration (Isa) Server

References · 7

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1135 · Security Note
• http://us-cert.gov/cas/techalerts/TA09-195A.html · Note
• http://secunia.com/advisories/35784 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5649 · Note
• http://securitytracker.com/id?1022547 · Note
• http://vupen.com/english/advisories/2009/1889 · Note