CVE:CVE-2009-2508
CNNVD:CNNVD-200912-111
Microsoft Windows Server 2003 SP2和Server 2008 Gold以及SP2中的Active Directory Federation Services (ADFS)的个别sign-on在网络会谈结束时执行不正确的移除资格，使现实最激烈的攻击者借助使用浏览器高速缓冲器的数据，获得使用同样网络浏览器的以前的用户的资格，称为"ADFS漏洞的Single Sign On Spoofing"
solution:Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,and avoid the version *:sp2