CERTA-2009-AVI-146
Vulnerability from certfr_avis
Plusieurs vulnérabilités présentes dans Microsoft ISA Server et Microsoft Forefront Management Gateway permettent à un utilisateur distant de provoquer un déni de service ou de réaliser des attaques de type injection de code indirecte (Cross-site Scripting).
Description
Deux vulnérabilités sont présentes dans Microsoft ISA Server et Microsoft Forefront Management Gateway :
- la première est relative à une erreur dans la gestion des états TCP par le pare-feu pour les services Web proxy et Web publishing. Elle permet à un utilisateur distant de provoquer un déni de service (CVE-2009-0077) ;
- la seconde concerne une erreur dans les formulaires HTML d'authentification de ISA Server et Forefront TMG. Elle permet à un utilisateur distant de réaliser des attaques de type injection de code indirecte (Cross-site Scripting) (CVE-2009-0237).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft Internet Security and Acceleration Server 2006 Support Update ; | ||
| Microsoft | N/A | Microsoft Internet Security and Acceleration Server 2006 Service Pack 1. | ||
| Microsoft | N/A | Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition Service Pack 3 ; | ||
| Microsoft | N/A | Microsoft Internet Security and Acceleration Server 2006 ; | ||
| Microsoft | N/A | Microsoft Forefront Management Gateway, Medium Business Edition ; | ||
| Microsoft | N/A | Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 3 ; |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Internet Security and Acceleration Server 2006 Support Update ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Security and Acceleration Server 2006 Service Pack 1.",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition Service Pack 3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Security and Acceleration Server 2006 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Forefront Management Gateway, Medium Business Edition ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nDeux vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans Microsoft ISA Server et\nMicrosoft Forefront Management Gateway :\n\n- la premi\u00e8re est relative \u00e0 une erreur dans la gestion des \u00e9tats TCP\n par le pare-feu pour les services Web proxy et Web publishing. Elle\n permet \u00e0 un utilisateur distant de provoquer un d\u00e9ni de service\n (CVE-2009-0077) ;\n- la seconde concerne une erreur dans les formulaires HTML\n d\u0027authentification de ISA Server et Forefront TMG. Elle permet \u00e0 un\n utilisateur distant de r\u00e9aliser des attaques de type injection de\n code indirecte (Cross-site Scripting) (CVE-2009-0237).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2009-0077",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0077"
},
{
"name": "CVE-2009-0237",
"url": "https://www.cve.org/CVERecord?id=CVE-2009-0237"
}
],
"initial_release_date": "2009-04-15T00:00:00",
"last_revision_date": "2009-04-15T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft M09-016 du 14 avril 2009 :",
"url": "http://www.microsoft.com/technet/security/Bulletin/M09-016.mspx"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft M09-016 du 14 avril 2009 :",
"url": "http://www.microsoft.com/france/technet/security/Bulletin/M09-016.mspx"
}
],
"reference": "CERTA-2009-AVI-146",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2009-04-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans Microsoft ISA Server et\nMicrosoft Forefront Management Gateway permettent \u00e0 un utilisateur\ndistant de provoquer un d\u00e9ni de service ou de r\u00e9aliser des attaques de\ntype injection de code indirecte (\u003cspan class=\"textit\"\u003eCross-site\nScripting\u003c/span\u003e).\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Microsoft ISA Server",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS09-016 du 14 avril 2009",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…