This host is missing an important security update according to Microsoft Bulletin MS11-079.

Successful exploitation could allow attackers to conduct cross-site scripting and HTTP response splitting attacks, cause a denial of service. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms11-079

The flaws are due to, - when Forefront Unified Access Gateway (UAG) does not properly handle script contained in a specially crafted request, allowing for malicious content to be reflected back to the user. - by an error within the MicrosoftClient.jar Java applet insecurely implements certain methods. - by improper validation of a NULL value contained within the session cookie.

Microsoft Forefront Unified Access Gateway 2010 Microsoft Forefront Unified Access Gateway 2010 Update 1 Microsoft Forefront Unified Access Gateway 2010 Update 2 Microsoft Forefront Unified Access Gateway 2010 Service Pack 1

• http://secunia.com/advisories/46402/
• http://support.microsoft.com/kb/2522482
• http://support.microsoft.com/kb/2522483
• http://support.microsoft.com/kb/2522484
• http://support.microsoft.com/kb/2522485
• http://technet.microsoft.com/en-us/security/bulletin/ms11-079

---

Updated on 2015-03-25