CVE-2014-0294: Improper Control of Generation of Code

Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."...

Microsoft Forefront Protection Version Detection

Detects the installed version of Microsoft Forefront Protection. The script logs in via smb, searches for Microsoft Forefront Protection in the registry and gets the version from registry. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced source...

MS14-008: Vulnerability in Microsoft Forefront Protection for Exchange Could Allow Remote Code Execution (2927022)

The version of Forefront Protection for Exchange installed on the remote Windows host is potentially affected by a remote code execution vulnerability when scanning specially crafted email messages. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72431;...

Microsoft Forefront Protection For Exchange RCE Vulnerability (2927022)

This host is missing a critical security update according to Microsoft Bulletin MS14-008. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Forefront Protection for Exchange code execution

Code execution on message parsing...

February 2014 Microsoft Patch Tuesday Security Bulletins

The expected continued respite from deploying Internet Explorer patches was apparently a mirage as Microsoft changed course from last Thursday’s advance notification and added two more bulletins to the February 2014 Patch Tuesday security updates, including the first IE rollup of 2014. IE had...

Microsoft Forefront Protection for Exchange Server CVE-2014-0294 Remote Code Execution Vulnerability

Description Microsoft Forefront Protection for Exchange Server is prone to a remote code-execution vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service...

KLA10607 Code execution vulnerability in Microsoft Forefront Protection

An unspecified vulnerability was found in Microsoft Forefront Protection. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed message. Original advisories CVE-2014-0294 Exploitation Related products...

Microsoft Forefront Protection for Exchange Server Installed

Binary data microsoftforefrontforexchangeinstalled.nbin...

February 2014 Microsoft Patch Tuesday Security Bulletins

February’s Microsoft Patch Tuesday promises to be a relatively straightforward set of bulletins, but more noteworthy is that it’s the same day Microsoft officially deprecates the MD5 hash algorithm. Announced last August, Microsoft will officially restrict the use of digital certificates with MD5...

MS Security Advisory 2846338: Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution

A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote host. Scanning a maliciously crafted file can result in arbitrary code execution. This plugin checks if a vulnerable version of MMPE is being used by any of the following applications : - Microsoft Forefro...

Microsoft Malware Protection Engine CVE-2013-1346 Remote Code Execution Vulnerability

Description Microsoft Malware Protection Engine is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code with LocalSystem account privileges. Failed exploit attempts will result in a denial-of-service condition. Microsoft Malware Protection...

MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. OpenVAS Vulnerability Test $Id: secpodms11-079.nasl 5958 2017-04-17 09:02:19Z teissa $ MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities 2544641 Authors: Madhuri D Copyright:...

Microsoft Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-5144

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an...

Design/Logic Flaw

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an...

CVE-2010-5144

The CVE-2010-5144 issue affects the ISAPI Filter plug-in used with Websense Enterprise, Websense Web Security, and Websense Web Filter (versions 6.3.3 and earlier) when deployed behind Microsoft ISA or Forefront TMG. The vulnerability allows remote attackers to bypass intended filtering and monit...

MS12-026: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Information Disclosure (2663860) (uncredentialed check)

Binary data forefrontuagms12-026.nbin...

Microsoft Forefront Unified Access Gateway (UAG) Detection

Detects the installed version of Microsoft Forefront Unified Access Gateway. The script logs in via smb, searches for Microsoft Forefront Unified Access Gateway in the registry and gets the version from registry. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Microsoft Forefront Unified Access Gateway URI公开重定向漏洞(MS12-026)

BUGTRAQ ID: 52903 CVE ID: CVE-2012-0146 Forefront Unified Access Gateway（UAG）是一款远程访问和协作软件。 Microsoft Forefront Unified Access Gateway UAG中存在可导致信息泄露的欺骗漏洞， 攻击者重定向UAG服务器的网络流量，发送恶意链接并诱使用户单击，利用此漏洞获取敏感信息。 0 Microsoft Forefront UAG 2010 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-026）以及相应补丁:...