Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

Bugtraq ID:	34414
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0077
Remote:	Yes
Local:	No
Published:	Apr 14 2009 12:00AM
Updated:	Apr 14 2009 11:06PM
Credit:	Fujitsu-Siemens
Vulnerable:	Microsoft ISA Server 2006 Supportability Update 0 Microsoft ISA Server 2006 SP1 Microsoft ISA Server 2006 0 Microsoft ISA Server 2004 SP3 Microsoft Forefront Threat Management Gateway Medium Business Edit
Not Vulnerable:

Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

Microsoft ISA Server and Forefront Threat Management Gateway are prone to a remote denial-of-service vulnerability.

A remote, anonymous attacker could exploit this issue to cause the Web proxy listener to become unresponsive, denying service legitimate users.

Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

Solution:
Fixes are available; please see the references for more information.


Microsoft Forefront Threat Management Gateway Medium Business Edit

• Microsoft Security Update for Forefront Threat Management Gateway, Medium Business Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=6abf9fb4-42d0 -4c67-935f-8dc67850148b

Microsoft ISA Server 2006 0

• Microsoft Security Update for ISA Server 2006
  http://www.microsoft.com/downloads/details.aspx?familyid=eda30bcc-0582 -4f60-a4c5-ea5000b7c770

Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Security Bulletin MS09-016 (Microsoft)