Welcome!

.NET Authors: Liz McMillan, Eric Carter, Maureen O'Gara, David Weinberger, Elizabeth White

Related Topics: .NET, Virtualization

.NET: Article

Microsoft: ISA Vulnerability Could Allow Internet Content Spoofing

Microsoft: ISA Vulnerability Could Allow Internet Content Spoofing
By Security News Desk
Article Rating:
November 10, 2004 12:00 AM EST
Reads:
 14,713
Thanking two Dutch developers, Martijn de Vries and Thomas de Clerk of Info Support for discovering and reporting it, Microsoft yesterday sent out a Security Alert about what it called a "Spoofing Vulnerability" in Microsoft Internet Security and Acceleration Server 2000 (ISA Server) and Microsoft Proxy Server 2.0 that could enable an attacker to spoof trusted Internet content.

ISA Server is an enterprise-level firewall and Web cache server. Proxy Server 2.0 acts as an Internet gateway for computers on a network. Users of the software listed below need to download and install an update:

  • Internet Security and Acceleration Server 2000 Service Pack 1 (SP1)
  • Internet Security and Acceleration Server 2000 SP2
  • Microsoft Small Business Server 2000 (includes Internet Security and Acceleration Server 2000)
  • Microsoft Small Business Server 2003 Premium Edition (includes Internet Security and Acceleration Server 2000)
  • Microsoft Proxy Server 2.0 SP1

    • The full Microsoft Security Bulletin is here: http://www.microsoft.com/security/bulletins/200411_isa.mspx

    Published November 10, 2004 – Reads 14,713
    Copyright © 2004 SYS-CON Media, Inc. — All Rights Reserved.
    Syndicated stories and blog feeds, all rights reserved by the author.

    More Stories By Security News Desk

    SYS-CON's Security News desk trawls the world of security for news of software, hardware, products, and services that seems likely to be of interest to infosec professionals and summarizes them for easy assimilation by busy IT managers and staff.

    Comments (1) View Comments

    Share your thoughts on this story.

    Add your comment
    You must be signed in to add a comment. Sign-in | Register

    In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

    Most Recent Comments
    By Stander 11/10/04 06:29:31 AM EST

    Pity the poor SMBs whose businesses have been affected by spoofing and phishing scams recently. How much is MS to blame? Or is it just a generic problem right now?