Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft ISA Server绕过Radius OTP认证漏洞
Vulnerability Description
ISA Server是微软产品家族之一，可以提供企业防火墙和高性能的Web缓存 。 如果对ISA Server 2006配置了使用RADIUS OTP的基于表单认证(FBA)，则当该服务器从用户代理接收到请求要求回退到HTTP-Basic认证时，ISA就无法正确地认证该请求。如果配置了KCD，ISA会继续对已发布的服务器使用KCD进行认证。对于知道管理员账号用户名的攻击者，成功利用这个漏洞可以完全控制依赖ISA Server 2006 Web发布规则进行认证的系统。攻击者随后可安装程序；查看、更改或删除数
CVSS Information
N/A
Vulnerability Type
N/A