Microsoft ISA Server HTTP Authentication Scheme Vulnerability

Bugtraq ID: 10481
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Sep 07 2003 12:00AM
Updated: Sep 07 2003 12:00AM
Credit: This issue was publicly disclosed in the referenced vendor web advisory. The individual responsible for discovery is currently unknown.
Vulnerable: Microsoft ISA Server 2000 SP1
+ Microsoft Small Business Server 2000 0
+ Microsoft Small Business Server 2003 Premium Edition
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Microsoft ISA Server 2000
+ Microsoft Small Business Server 2000 0
+ Microsoft Small Business Server 2003 Premium Edition
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Server
Not Vulnerable: Microsoft ISA Server 2000 SP2
+ Microsoft Small Business Server 2000 0
+ Microsoft Small Business Server 2003 Premium Edition


 

Privacy Statement
Copyright 2010, SecurityFocus