Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
BID:11605
Info
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
| Bugtraq ID: | 11605 |
| Class: | Design Error |
| CVE: |
CVE-2004-0892 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 04 2004 12:00AM |
| Updated: | Jul 12 2009 08:06AM |
| Credit: | Discovery is credited to Martijn de Vries and Thomas de Klerk of of Info Support. |
| Vulnerable: |
Microsoft Small Business Server 2003 Microsoft Small Business Server 2000 0 Microsoft Proxy Server 2.0 SP1 Microsoft Proxy Server 2.0 Microsoft ISA Server 2000 SP2 Microsoft ISA Server 2000 SP1 Microsoft ISA Server 2000 FP1 Microsoft ISA Server 2000 |
| Not Vulnerable: |
Microsoft ISA Server 2004 |
Discussion
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
Microsoft ISA and Proxy Server are reportedly prone to a Web site spoofing vulnerability. Successful exploitation of this issue could allow a remote attacker to spoof a trusted Web site.
If a connection were made to the spoofed Web site using SSL, the malicious site would not be able to spoof the certificate of the legitimate site. This would likely cause a warning message to appear to the user.
Microsoft Small Business Server 2000 and 2003 include the affected software.
Microsoft ISA and Proxy Server are reportedly prone to a Web site spoofing vulnerability. Successful exploitation of this issue could allow a remote attacker to spoof a trusted Web site.
If a connection were made to the spoofed Web site using SSL, the malicious site would not be able to spoof the certificate of the legitimate site. This would likely cause a warning message to appear to the user.
Microsoft Small Business Server 2000 and 2003 include the affected software.
Exploit / POC
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
Solution:
Microsoft has released a security bulletin and fixes to address this issue for supported versions.
Update (11/16/2004): Microsoft has revised MS04-039 to include updated fixes for ISA Server 2000 SP1 and for users who are running the vulnerable software on Microsoft Windows 2000 SP3 platforms. These updated fixes address installation problems. Please see Microsoft Security Bulletin MS04-039 for further information.
Microsoft Small Business Server 2003
Microsoft ISA Server 2000 SP2
Microsoft Small Business Server 2000 0
Microsoft Proxy Server 2.0 SP1
Microsoft ISA Server 2000 SP1
Solution:
Microsoft has released a security bulletin and fixes to address this issue for supported versions.
Update (11/16/2004): Microsoft has revised MS04-039 to include updated fixes for ISA Server 2000 SP1 and for users who are running the vulnerable software on Microsoft Windows 2000 SP3 platforms. These updated fixes address installation problems. Please see Microsoft Security Bulletin MS04-039 for further information.
Microsoft Small Business Server 2003
-
Microsoft Vulnerability in Microsoft ISA Server 2000 Could Allow Internet Content Spoofing (888258)
http://www.microsoft.com/downloads/details.aspx?familyid=7A4C318F-5AC9 -4CF2-8792-A4A62076EBE7&displaylang=enm
Microsoft ISA Server 2000 SP2
-
Microsoft Vulnerability in Microsoft ISA Server 2000 Could Allow Internet Content Spoofing (888258)
http://www.microsoft.com/downloads/details.aspx?familyid=7A4C318F-5AC9 -4CF2-8792-A4A62076EBE7&displaylang=enm
Microsoft Small Business Server 2000 0
-
Microsoft Vulnerability in Microsoft ISA Server 2000 Could Allow Internet Content Spoofing (888258)
http://www.microsoft.com/downloads/details.aspx?familyid=7A4C318F-5AC9 -4CF2-8792-A4A62076EBE7&displaylang=enm
Microsoft Proxy Server 2.0 SP1
-
Microsoft Vulnerability in Microsoft® Proxy Server 2.0 Could Allow Internet Content Spoofing (888258)
http://www.microsoft.com/downloads/details.aspx?familyid=55643141-91E3 -4474-8134-72887BC6FC18&displaylang=en
Microsoft ISA Server 2000 SP1
-
Microsoft Vulnerability in Microsoft ISA Server 2000 Could Allow Internet Content Spoofing (888258)
http://www.microsoft.com/downloads/details.aspx?familyid=7A4C318F-5AC9 -4CF2-8792-A4A62076EBE7&displaylang=enm
References
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability
References:
References:
- Knowledge Base Article - 889189 (Microsoft)
- Microsoft Security Bulletin Advance Notification (Microsoft)
- Microsoft Security Bulletin MS04-039 (Microsoft)