Full title: Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vulnerability 
Category: remote exploits
Platform: windows
Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.

# 0day.today @ http://0day.today/