Digital Edition

SYS-CON.TV
Microsoft: ISA Vulnerability Could Allow Internet Content Spoofing
Microsoft: ISA Vulnerability Could Allow Internet Content Spoofing

Thanking two Dutch developers, Martijn de Vries and Thomas de Clerk of Info Support for discovering and reporting it, Microsoft yesterday sent out a Security Alert about what it called a "Spoofing Vulnerability" in Microsoft Internet Security and Acceleration Server 2000 (ISA Server) and Microsoft Proxy Server 2.0 that could enable an attacker to spoof trusted Internet content.

ISA Server is an enterprise-level firewall and Web cache server. Proxy Server 2.0 acts as an Internet gateway for computers on a network. Users of the software listed below need to download and install an update:

  • Internet Security and Acceleration Server 2000 Service Pack 1 (SP1)
  • Internet Security and Acceleration Server 2000 SP2
  • Microsoft Small Business Server 2000 (includes Internet Security and Acceleration Server 2000)
  • Microsoft Small Business Server 2003 Premium Edition (includes Internet Security and Acceleration Server 2000)
  • Microsoft Proxy Server 2.0 SP1

  • The full Microsoft Security Bulletin is here: http://www.microsoft.com/security/bulletins/200411_isa.mspx

    About Security News Desk
    SYS-CON's Security News desk trawls the world of security for news of software, hardware, products, and services that seems likely to be of interest to infosec professionals and summarizes them for easy assimilation by busy IT managers and staff.

    In order to post a comment you need to be registered and logged in.

    Register | Sign-in

    Reader Feedback: Page 1 of 1

    Pity the poor SMBs whose businesses have been affected by spoofing and phishing scams recently. How much is MS to blame? Or is it just a generic problem right now?




    ADS BY GOOGLE
    Subscribe to the World's Most Powerful Newsletters

    ADS BY GOOGLE

    Technological progress can be expressed as layers of abstraction - higher layers are built on top of...
    "Calligo is a cloud service provider with data privacy at the heart of what we do. We are a typical ...
    Having been in the web hosting industry since 2002, dhosting has gained a great deal of experience w...
    NanoVMs is the only production ready unikernel infrastructure solution on the market today. Unikerne...
    CloudEXPO | DevOpsSUMMIT | DXWorldEXPO Silicon Valley 2019 will cover all of these tools, with the m...
    SUSE is a German-based, multinational, open-source software company that develops and sells Linux pr...
    Your job is mostly boring. Many of the IT operations tasks you perform on a day-to-day basis are rep...
    When building large, cloud-based applications that operate at a high scale, it’s important to mainta...
    In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, disc...
    Big Switch's mission is to disrupt the status quo of networking with order of magnitude improvements...
    Lori MacVittie is a subject matter expert on emerging technology responsible for outbound evangelism...
    Dynatrace is an application performance management software company with products for the informatio...
    In his session at 21st Cloud Expo, Michael Burley, a Senior Business Development Executive in IT Ser...
    All in Mobile is a mobile app agency that helps enterprise companies and next generation startups bu...
    Yottabyte is a software-defined data center (SDDC) company headquartered in Bloomfield Township, Oak...
    Serveless Architectures brings the ability to independently scale, deploy and heal based on workload...
    Whenever a new technology hits the high points of hype, everyone starts talking about it like it wil...
    Every organization is facing their own Digital Transformation as they attempt to stay ahead of the c...
    Bill Schmarzo, Tech Chair of "Big Data | Analytics" of upcoming CloudEXPO | DXWorldEXPO New York (No...
    Chris Matthieu is the President & CEO of Computes, inc. He brings 30 years of experience in developm...