• info
• discussion
• exploit
• solution
• references

Microsoft ISA Server HTTP Request Smuggling Vulnerability

Solution:
Microsoft has released a fix to address this issue.


Microsoft ISA Server 2000 Enterprise Edition SP2

• Microsoft Microsoft Internet Security and Acceleration (ISA) Server 2000 Cumulative Security Update
  ISA Server Service Pack 2 must be installed prior to the installation of this update.
  http://www.microsoft.com/downloads/details.aspx?familyid=E579813B-0372 -45BE-8070-3F4D7D4CB89C&displaylang=en

Microsoft ISA Server 2000 FP1

• Microsoft Microsoft Internet Security and Acceleration (ISA) Server 2000 Cumulative Security Update
  ISA Server Service Pack 2 must be installed prior to the installation of this update.
  http://www.microsoft.com/downloads/details.aspx?familyid=E579813B-0372 -45BE-8070-3F4D7D4CB89C&displaylang=en

Microsoft ISA Server 2000 SP1

• Microsoft Microsoft Internet Security and Acceleration (ISA) Server 2000 Cumulative Security Update
  ISA Server Service Pack 2 must be installed prior to the installation of this update.
  http://www.microsoft.com/downloads/details.aspx?familyid=E579813B-0372 -45BE-8070-3F4D7D4CB89C&displaylang=en

Microsoft ISA Server 2000

• Microsoft Microsoft Internet Security and Acceleration (ISA) Server 2000 Cumulative Security Update
  ISA Server Service Pack 2 must be installed prior to the installation of this update.
  http://www.microsoft.com/downloads/details.aspx?familyid=E579813B-0372 -45BE-8070-3F4D7D4CB89C&displaylang=en

Microsoft ISA Server 2000 SP2

• Microsoft Microsoft Internet Security and Acceleration (ISA) Server 2000 Cumulative Security Update
  ISA Server Service Pack 2 must be installed prior to the installation of this update.
  http://www.microsoft.com/downloads/details.aspx?familyid=E579813B-0372 -45BE-8070-3F4D7D4CB89C&displaylang=en