Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability

Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability

Microsoft ISA and Proxy Server are reportedly prone to a Web site spoofing vulnerability. Successful exploitation of this issue could allow a remote attacker to spoof a trusted Web site.

If a connection were made to the spoofed Web site using SSL, the malicious site would not be able to spoof the certificate of the legitimate site. This would likely cause a warning message to appear to the user.

Microsoft Small Business Server 2000 and 2003 include the affected software.