Re: Cross site scripting issue in IIS 5.0

On Oct 15, 8:34 am, criechton <criech...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
I have a Windows 2003 server SP4 running IIS and a PCI scan shows up with a
Cross site scripting vulnerability. The Standard M$ response was to install
MS02-018.mspx but this was from 2002 and must have been installed already
years ago because since the server is on SP4. Please advise if there is any
other way to fix this?

Thanks,
Gonzolean


There are Windows Server 2000 security fixes post SP4. You will need
to finish patching the Windows Server 2000 before running any security
analysis against it.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

.

Relevant Pages

  • RE: Client problem browsing certain shares
    ... folder with 400 zip files, ... Does the problem appear on all the Windows Server 2003 computers? ... Install NetBEUI on Windows Server 2003 ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows server identifies the Intel EM64T Processor as an AMD6
    ... The AMD64 and EMT64T platforms are the same. ... Where are we locating the Microsoft iSCSI Initiator packages? ... <Subject: RE: Windows server identifies the Intel EM64T Processor as an AMD6 ... What software is failing to install? ...
    (microsoft.public.windows.server.general)
  • Re: WSUS SP1
    ... I was referring to when several people downloaded the SP1 release for Windows server 2003, which was specifically NOT to be used with SBS. ... My concern is telling WSUS to check for Windows Server 2003 updates, and then knowing which of those are OK to install on SBS 2003. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 SP1 + June updates: Server Performance Report: "No da
    ... I was working with the main administrator account. ... > Security Update for Windows Server 2003 ... >> Are you sure you installed ALL 5 PARTS of the SP1 install? ...
    (microsoft.public.windows.server.sbs)
  • RE: Windows Server 2003 Shuts down laptop during install
    ... If you need to perform a parallel installation of Windows Server 2003, ... Microsoft Online Partner Support ... Windows Server 2003 Shuts down laptop during install ...
    (microsoft.public.windows.server.migration)