Other

    Security Update for Unified Access Gateway 2010 with Update 1 (KB2433584)

    Language:
    English
    Vulnerabilities in Forefront Unified Access Gateway could Cause Cross Site Scripting Resulting in Elevation of Privilege
    • Version:

      4.0.1152.150

      File Name:

      UAG-KB2433584-v4.0.1152.150-ENU.msp

      Date Published:

      11/8/2010

      File Size:

      10.8 MB

      KB Articles: KB2433584KB2316074

      Security bulletins:MS10-089

        This security update resolves four privately reported vulnerabilities in Forefront Unified Access Gateway 2010 (UAG). The most severe of these vulnerabilities could allow elevation of privilege if a user visits an affected Web site using a specially crafted URL. An attacker could host a Web site that contains a Web page that is used to exploit this vulnerability. In addition, compromised Web sites and Web sites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit this vulnerability.

        Here are the cases with the severity rating:
        UAG Redirection Issue May Allow Phishing Vulnerability - CVE-2010-2732 (Important - Spoofing)
        UAG XSS Allows EOP Vulnerability - CVE-2010-2733 (Important - Elevation of Privilege)
        XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability - CVE-2010-2734 (Important - Elevation of Privilege)
        XSS in Sginurl.asp Vulnerability - CVE-2010-3936 (Important - Elevation of Privilege)
    • Supported Operating System

      Windows Server 2008 R2

        Forefront UAG can be installed on computers running the Windows Server 2008 R2 Standard or Windows Server 2008 R2 Enterprise 64-bit operating systems.
      • 1. For the file you want to download, click the Download button on this page.
        2. Click Save to download to your computer.

    Popular downloads

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft suggests

    The power of Office. Everywhere. Learn more.
    The power of Office. Everywhere.
    Start your free month of Office 365 now.
    Learn more