NVD

Id
8877  
Name
CVE-2011-2012  
Description
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-10-11  
Modified Date
2012-01-26  
Seq
2011-2012  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51094 8877 CVE-2011-2012 oval:org.mitre.oval:def:12799  View
51095 8877 CVE-2011-2012 MS11-079  View
51096 8877 CVE-2011-2012 49980  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32204 JVNDB-2011-002444 Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性 Microsoft Forefront Unified Access Gateway (UAG) は、Cookie のセッションを適切に検証しないため、サービス運用妨害 (IIS 休止) 状態となる脆弱性が存在します。 CVE-2011-2012 49919 CVE-2011-2012 8877 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002444.html 2011-10-11 2011-10-21 View