Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
BID:44631
Info
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
| Bugtraq ID: | 44631 |
| Class: | Design Error |
| CVE: |
CVE-2010-2732 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 09 2010 12:00AM |
| Updated: | Apr 19 2013 12:59PM |
| Credit: | Microsoft |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
Microsoft Forefront Unified Access Gateway (UAG) is prone to a spoofing vulnerability.
An attacker can exploit this issue to spoof a UAG server or redirect legitimate network traffic intended for a UAG server. This may allow the attacker to masquerade as a legitimate server, aiding in further attacks.
Microsoft Forefront Unified Access Gateway (UAG) is prone to a spoofing vulnerability.
An attacker can exploit this issue to spoof a UAG server or redirect legitimate network traffic intended for a UAG server. This may allow the attacker to masquerade as a legitimate server, aiding in further attacks.
Exploit / POC
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
Attackers can exploit this issue using standard, readily available tools.
Attackers can exploit this issue using standard, readily available tools.
Solution / Fix
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.
Solution:
The vendor released an advisory and fixes to address this issue. Please see the references for more information.
References
Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
References:
References:
- Forefront Unified Access Gateway Homepage (Microsoft)
- Microsoft Security Bulletin MS10-089 (Microsoft)