07.14.2009 - MS09-031 - Important: Vulnerability in Microsoft ISA Server 2006 Could Cause Elevation of Privilege (970953)

Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2006. The vulnerability could allow elevation of privilege if an attacker successfully impersonates an administrative user account for an ISA server that is configured for Radius One Time Password (OTP) authentication and authentication delegation with Kerberos Constrained Delegation. - View Microsoft Security Bulletin MS09-031 - View Microsoft Knowledge Base Article - 970953 - Visit Microsoft Corporation