CVE Database
/

CVE-2011-2012

Back to search

CVE-2011-2012

Published: Oct 12, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."

VendorProductVersions

n/a

n/a

affected
n/a

References

49980
vdb-entry
x_refsource_BID
MS11-079
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:12799
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now