Click Here to Install Silverlight*
United StatesChange|All Microsoft Sites
Microsoft
Download Center 
Search Advanced Search

Security Update for ISA Server 2006 (KB 970811)

Brief Description
A vulnerability in ISA Server 2006 may allow a user to log on to a published Web server using invalid credentials.

On This Page

Quick Details
File Name:ISA2006-RTM-KB970811-X86-ENU.msp
Version:5720.174
Security Bulletins:MS09-031
Knowledge Base (KB) Articles:KB970811
Date Published:7/14/2009
Language:English
Download Size:6.1 MB
Estimated Download Time: 15 min 56K
Change Language:
  

Overview

When publishing a Web server using forms-based authentication with RADIUS one-time password (OTP) as the credentials authority and Kerberos constrained delegation, it may be possible to bypass the form authentication and log on using invalid credentials.

 Top of page

System Requirements

  • Supported Operating Systems: Windows Server 2003 Service Pack 1
• ISA Server 2006 without Service Pack 1 and without the Supportability Update

 Top of page

Instructions

1. Click the Download button on this page to start the download of a component.

2. Do one of the following:
• To save the download to your computer for installation at a later time, click Save.
• To cancel the download, click Cancel.

 Top of page

 Top of page

 Top of page

© 2009 Microsoft Corporation. All rights reserved. Contact Us |Terms of Use |Trademarks |Privacy Statement