Home / os / winmobile

Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction

Posted on 03 July 2018

Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.

 

TOP