This host is missing a critical security update according to Microsoft Bulletin MS09-070.

Successful exploitation will allow remote attackers to take complete control of the victim's system. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms09-070.mspx

The vulnerability is due to incorrect validation of request headers when an authenticated user connects to an ADFS enabled Web Server. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

Microsoft Windows 2K3 Service Pack 2 and prior. Microsoft Windows Server 2008 Service Pack 2 and prior.

• http://secunia.com/advisories/37542/
• http://support.microsoft.com/kb/971726
• http://www.microsoft.com/technet/security/bulletin/MS09-070.mspx
• http://www.vupen.com/english/advisories/2009/3434

---

Updated on 2015-03-25