Microsoft Threat Mgmt Gateway Firewall Client DNS Lookup Buffer Overflow - Ver2 (CVE-2011-1889)

A memory corruption vulnerability exists in Microsoft Forefront Threat Management Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2011-1889

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway TMG 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka “TMG Firewall Client Memory Corruption Vulnerability.” Recent assessments: Assessed Attacker...

Microsoft Forefront Threat Management Gateway (TMG)防火墙客户端内存破坏漏洞

Bugtraq ID: 48181 CVE ID：CVE-2011-1889 Microsoft Forefront Threat Management Gateway可以安装在DirectAccess服务器上，提供额外保护和其他Forefront TMG功能。 NSPLookupServiceNext函数存在一个边界错误，提交通过TMG防火墙客户端的特殊请求可破坏内存，成功利用漏洞可执行任意代码。 Microsoft Forefront Threat Management Gateway 2010 Client 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 OpenVAS Vulnerability Test $Id: secpodms11-040.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability 2520426 Authors: Antu Sanadi...

Microsoft Windows Threat Management Gateway Firewall Client Remote Code Execution Vulnerability (2520426)

This host is missing a critical security update according to Microsoft Bulletin MS11-040 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Forefront Threat Management Gateway (TMG) Firewall Client Memory Corruption Vulnerability

Description Microsoft Forefront Threat Management Gateway TMG Firewall client is prone to a memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed attacks may cause a denial-of-service condition...

Cross site scripting

Cross-site scripting XSS vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote...

Denial of service

The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote...

CVE-2009-0077

The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote...

CVE-2009-0237

Cross-site scripting XSS vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote...

Microsoft ISA Server and Forefront Threat Management Gateway Denial of Service Vulnerability

Description Microsoft ISA Server and Forefront Threat Management Gateway are prone to a remote denial-of-service vulnerability. A remote, anonymous attacker could exploit this issue to cause the Web proxy listener to become unresponsive, denying service legitimate users. Technologies Affected...