Alert GCSA-10165 - Vulnerabilita' in Microsoft Firefront Unified

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1




******************************************************************

    Alert ID : GCSA-10165
        Data : 11 Ottobre 2010
      Titolo : Vulnerabilita' in Microsoft Firefront Unified Access
Gateway (UAG) (MS10-089)

******************************************************************


:: Descrizione del problema

    Sono state riscontrate multiple vulnerabilita' in Microsoft
Forefront Unified Access Gateway (UAG) che potrebbero essere sfruttate
da un attaccante remoto per eseguire escalation di privilegi, inducendo
l'utente avisitare pagine web malevole appositamente
predisposte.


:: Software interessato

    Microsoft Forefront Unified Access Gateway 2010
    Microsoft Forefront Unified Access Gateway 2010 Update 1
    Microsoft Forefront Unified Access Gateway 2010 Update 2


:: Impatto

     Escalation di privilegi

:: Soluzioni

    Installare manualmente la patch elencata nel bollettino Microsoft,
    oppure utilizzare uno degli strumenti di aggiornamento come:
    Aggiornamenti Automatici, Windows Update, Microsoft Update,
    Windows Server Update Services.


:: Riferimenti

Microsoft Security Bulletin
   http://www.microsoft.com/technet/security/Bulletin/ms10-089.mspx

VUPEN
   http://www.vupen.com/english/advisories/2010/2925

Secunia
   http://secunia.com/advisories/42131

Mitre's CVE ID
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2732
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2733
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2734
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3936





-----BEGIN PGP SIGNATURE-----

iQCVAwUBTNv03vOB+SpikaiRAQIuAAQAtBwQ/dSY+IK3Qj7pbS6RekgLbVlHyD2Z
UC77HkPPzeeTqh2dKYXg7qPmjQUFt/0NRA/wrcI6JldR9DZYSTZ7MQxQoYa0OPlp
9H966hXKCs7YBXGCkl7WuTU+5yrzT8OJ4AujYna42uEoJRGckVrgyYGrHjB+1ufZ
f39MJ9TAVJM=
=ZcwN
-----END PGP SIGNATURE-----