CVE-2003-0526

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...

CVE-2003-0526

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...

CVE-2003-0526

The CVE-2003-0526 entry describes a cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. The flaw allows remote attackers to inject arbitrary web script via a URL whose domain name portion contains the attack payload. The vulnerability arises...

Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...

ISA Server - Error Page Cross Site Scripting

======================================================================== = ISA Server - Error Page Cross Site Scripting = = [email protected] = http://www.security-assessment.com = = MS Bulletin posted: July 16, 2003 = http...

Microsoft ISA Server HTTP error handler XSS (TL#007)

Thor Larholm security advisory TL006 ------------------------------------- 16 July 2003 HTML format: http://pivx.com/larholm/adv/TL006 Topic: ISA Server HTTP error handler XSS. Discovery date: 25 June 2002. Severity: Medium Affected applications: ---------------------- Any Microsoft Internet...

Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...

Microsoft ISA Server 2000 - Cross-Site Scripting

Microsoft ISA Server 2000 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8207/info ISA server will output certain error pages when requests that are invalid, for whatever reason, are transmitted through it. These error pages will appear in the context of the domain that the...

SurfControl Web Filter for Microsoft ISA Server Vulnerability

SurfControl Web Filter for Microsoft ISA Server Vulnerability Package: SurfControl Web Filter for Microsoft ISA Vendor Web Site: http://www.surfcontrol.com Version: 4.2.0.21 Platforms: Windows 2000 Server Local: No Remote: Yes Fix Available: No recommended steps listed below Vendor Contacted:...

CVE-2003-0110

The CVE-2003-0110 issue affects Microsoft Proxy Server 2.0 and ISA Server 2000, specifically the Winsock Proxy/WinSock Proxy service (wspsrv.exe) that binds UDP port 1745. A spoofed, malformed UDP packet can trigger a denial-of-service, causing CPU exhaustion or a packet storm on the remote host....

MS03-012: Microsoft ISA Server Winsock Proxy DoS (331066)

A vulnerability in Microsoft Proxy Server 2.0 and ISA Server 2000 allows an attacker to cause a denial of service of the remote Winsock proxy service by sending a specially crafted packet that would cause 100% CPU utilization on the remote host and make it unresponsive. C Tenable Network Security...

Microsoft ISA Server

It's possible to cause infinite reply loops with spoofed UDP packets with bith source and destination ports 1745 between 2 servers on from server to itself...

CVE-2003-0011

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service blocked traffic to DNS servers via a certain type of incoming DNS request that is not properly handled...

CVE-2003-0011

Microsoft ISA Server DNS – Denial Of Service (MS03-009): A vulnerability exists in the ISA Server 2000 DNS intrusion detection application filter that can be exploited by a specially formed DNS request to cause a denial of service in DNS services. Public references describe that the attacker can ...

CVE-2003-0011

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service blocked traffic to DNS servers via a certain type of incoming DNS request that is not properly handled...

MS03-009: Microsoft ISA Server DNS - Denial Of Service (331065)

A vulnerability in Microsoft ISA Server 2000 allows an attacker to cause a denial of service in DNS services by sending a specially crafted DNS request packet. Note that, to be vulnerable, the ISA Server must be manually configured to publish an internal DNS server, which it does not do by defaul...

Microsoft Security Bulletin MS03-009: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service 331065 Date: 19 March 2003 Software: Microsoft ISA Server Impact: Denial of Service Max Risk: Moderate...

Microsoft ISA Server DNS publishing DoS

Incomplete DNS request DoS...

Microsoft Internet Explorer 56 Microsoft ISA Server 2000 Microsoft Proxy Server 2.0 Gopher Client - Remote Buffer Overflow

Microsoft Internet Explorer 56 Microsoft ISA Server 2000 Microsoft Proxy Server 2.0 Gopher Client - Remote Buffer Overflow source: https://www.securityfocus.com/bid/4930/info Microsoft Internet Explorer, Proxy Server and ISA Server includes a gopher client. Reportedly, these clients are vulnerabl...

Microsoft Internet Explorer 5/6 / Microsoft ISA Server 2000 / Microsoft Proxy Server 2.0 Gopher Client - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/4930/info Microsoft Internet Explorer, Proxy Server and ISA Server includes a gopher client. Reportedly, these clients are vulnerable to a buffer overflow condition. The vulnerability exists in the component that parses gopher replies. A malicious server ...