Microsoft Forefront Unified Access Gateway Null Session Cookie Denial of Service Vulnerability

2011-10-11T00:00:00
ID SMNTC-49980
Type symantec
Reporter Symantec Security Response
Modified 2011-10-11T00:00:00

Description

Description

Microsoft Forefront Unified Access Gateway is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the web server of the affected application, denying service to legitimate users.

Technologies Affected

  • Microsoft Forefront Unified Access Gateway 2010
  • Microsoft Forefront Unified Access Gateway 2010 SP1
  • Microsoft Forefront Unified Access Gateway 2010 Update 1
  • Microsoft Forefront Unified Access Gateway 2010 Update 2

Recommendations

Block external access at the network boundary, unless external parties require service.
Filter access to the affected computer at the network boundary if global access isn't required. Restricting access to only trusted computers and networks might greatly reduce the likelihood of exploits.

Deploy network intrusion detection systems to monitor network traffic for malicious activity.
Deploy NIDS to monitor network traffic for anomalous or suspicious activity. Monitor logs generated by NIDS and by the server itself for evidence of attacks against the server.

Updates are available. Please see the references for more information.