PT-2011-3511 · Microsoft · Forefront Unified Access Gateway (Uag) 2010

Elisabeth Demeter · Published 2011-10-12 · Updated 2018-10-12 · CVE-2011-1969

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway (UAG) 2010 versions Gold through SP1

Description The issue allows remote attackers to execute arbitrary code on client machines via unspecified vectors. This is related to the MicrosoftClient.jar file containing a signed Java applet.

Recommendations For Microsoft Forefront Unified Access Gateway (UAG) 2010 versions Gold through SP1, consider disabling the use of the MicrosoftClient.jar file until a patch is available. Restrict access to the Java applet to minimize the risk of exploitation.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-1969

Affected Products

Forefront Unified Access Gateway (Uag) 2010

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1969 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13032 · Note
• http://securityfocus.com/bid/49983 · Note