Intrusion PreventionMS.Lync.Server.ReachJoin.ASPX.Remote.Command.Injection
Description
This indicates a possible attack attempt against a remote Command Injection vulnerability in Microsoft Lync Server 2010.
The vulnerability is caused by the application's failure to properly sanitize user supplied input. Successful attacks may allow the attackers to execute arbitrary code.
Affected Products
Microsoft Lync 2010 4.0.7577.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply patches, available from the website:
http://support.microsoft.com/kb/2500441
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-02 | 16.972 |
| ID | 28258 |
| Created | Aug 04, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |