Re: Microsoft Security Bulletin MS03-028 - 816456

From: Thomas W Shinder [MVP] (tshinder_at_hotmail.com)
Date: 07/17/03


Date: Thu, 17 Jul 2003 08:02:26 -0500


Hi Jerry,

I thought this was an old problem that was already patched. I'm wondering
why its showing up again. I'll have to check my history books and see what's
going on here :-)

Thanks!

--
Tom
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
ISA Server and Beyond Seminars - http://tinyurl.com/9sce
MVP -- ISA Server 2000
"Jerry Bryant [MSFT]" <jbryant@online.microsoft.com> wrote in message
news:eLHZUA8SDHA.632@TK2MSFTNGP12.phx.gbl...
: Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting
: Attack (816456)
: Date: July 16, 2003
: Software: Microsoft Internet Security and Acceleration (ISA) Server 2000
: Impact: Allows an attacker to execute code of their choice Maximum
Severity
: Rating: Important
: Bulletin: MS03-028
:
: The Microsoft Security Response Center has released Microsoft Security
: Bulletin MS03-028
:
: What Is It?
: The Microsoft Security Response Center has released Microsoft Security
: Bulletin MS03-028 which concerns a vulnerability in Microsoft Internet
: Security and Acceleration (ISA) Server 2000.  Customers are advised to
: review the information in the bulletin and test and deploy the patch in
: their environments, if applicable.
:
: More information is now available at
: http://www.microsoft.com/technet/security/bulletin/MS03-028.asp
:
: If you have any questions regarding the patch or its implementation after
: reading the above listed bulletin you should contact Product Support
: Services in the United States at 1-866-PCSafety (1-866-727-2338).
: International customers should contact their local subsidiary.
:
: --
: Regards,
:
: Jerry Bryant - MCSE, MCDBA
: Microsoft IT Communities
:
: Get Secure! www.microsoft.com/security
:
:
: This posting is provided "AS IS" with no warranties, and confers no
rights.
:
:


Relevant Pages

  • Re: Microsoft Security Bulletin MS03-012 - 331066
    ... After we tried to install this hotfix, ISA server stop responding and we are ... > The Microsoft Security Response Center has released Microsoft Security ... > Bulletin MS03-012 which concerns a vulnerability in Microsoft Proxy Server ...
    (microsoft.public.security)
  • Re: Microsoft Security Bulletin MS02-068
    ... > The related KB articles are usually available with in 24 hours of the ... > bulletin release. ... > Jerry Bryant - MCSE, ... >>> The Microsoft Security Response Center has released Microsoft Security ...
    (microsoft.public.security)
  • Re: Microsoft Security Bulletin MS03-040 - 828750
    ... Pardon me, but do you have ANY idea how foolish your post is? ... > Title: Cumulative Patch for Internet Explorer Execution > Date: October 3, ... > The Microsoft Security Response Center has released Microsoft Security> Bulletin MS03-040 ...
    (microsoft.public.security)
  • Re: Microsoft Security Bulletin MS03-040 - 828750
    ... Pardon me, but do you have ANY idea how foolish your post is? ... > Title: Cumulative Patch for Internet Explorer Execution > Date: October 3, ... > The Microsoft Security Response Center has released Microsoft Security> Bulletin MS03-040 ...
    (microsoft.public.security.virus)
  • Re: Microsoft Security Bulletin MS03-040 - 828750
    ... Pardon me, but do you have ANY idea how foolish your post is? ... > Title: Cumulative Patch for Internet Explorer Execution > Date: October 3, ... > The Microsoft Security Response Center has released Microsoft Security> Bulletin MS03-040 ...
    (microsoft.public.win2000.security)