|
|
Family: Windows : Microsoft Bulletins --> Category: infos
ISA Server 2000 and Proxy Server 2.0 Internet Content Spoofing (888258) Vulnerability Scan
Vulnerability Scan Summary
Checks for hotfix Q888258
Detailed Explanation for this Vulnerability Test
Synopsis :
It is possible to spoof the content of the remote proxy server.
Description :
The remote host is running ISA Server 2000, an HTTP proxy. The
remote version of this software is vulnerable to content spoofing
attacks.
A possible hacker may lure a victim to visit a malicious web site and
the user could believe is visiting a trusted web site.
Solution :
Microsoft has released a set of patches for ISA Server 2000 :
http://www.microsoft.com/technet/security/bulletin/ms04-039.mspx
Threat Level:
Medium / CVSS Base Score : 4
(AV:R/AC:L/Au:NR/C:N/A:N/I:P/B:I)
Click HERE for more information and discussions on this network vulnerability scan.
|
