This host is missing an important security update according to Microsoft Bulletin MS13-066.

Successful exploitation will allow remote attackers to obtain potentially sensitive information.

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms13-066

Flaw is due to an error within the Active Directory Federation Services (ADFS)

Active Directory Federation Services 2.1 - Microsoft Windows Server 2012 Active Directory Federation Services 2.0 - Microsoft Windows Server 2008 x32/x64 Service Pack 2 and prior - Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior Active Directory Federation Services 1.0 - Microsoft Windows 2003 x32/x64 Service Pack 2 and prior - Microsoft Windows Server 2008 x32/x64 Service Pack 2 and prior

Get the vulnerable file version and check appropriate patch is applied or not.

• http://osvdb.org/96181
• http://secunia.com/advisories/54459
• http://support.microsoft.com/kb/2843638
• http://support.microsoft.com/kb/2843639
• http://support.microsoft.com/kb/2868846
• https://technet.microsoft.com/en-us/security/bulletin/ms13-066

---

Updated on 2015-03-25