CVE

Id
7353  
CVE No.
CVE-2003-0526  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."  
Phase
Assigned (20030708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
43076 7353 CVE-2003-0526 BUGTRAQ:20030716 ISA Server - Error Page Cross Site Scripting  View
43077 7353 CVE-2003-0526 URL:http://marc.info/?l=bugtraq&m=105838862201266&w=2  View
43078 7353 CVE-2003-0526 VULNWATCH:20030716 ISA Server - Error Page Cross Site Scripting  View
43079 7353 CVE-2003-0526 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0029.html  View
43080 7353 CVE-2003-0526 BUGTRAQ:20030716 Microsoft ISA Server HTTP error handler XSS (TL#007)  View
43081 7353 CVE-2003-0526 URL:http://marc.info/?l=bugtraq&m=105838519729525&w=2  View
43082 7353 CVE-2003-0526 NTBUGTRAQ:20030716 Microsoft ISA Server HTTP error handler XSS (TL#007)  View
43083 7353 CVE-2003-0526 URL:http://marc.info/?l=ntbugtraq&m=105838590030409&w=2  View
43084 7353 CVE-2003-0526 VULNWATCH:20030716 Microsoft ISA Server HTTP error handler XSS (TL#007)  View
43085 7353 CVE-2003-0526 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0031.html  View
43086 7353 CVE-2003-0526 MISC:http://pivx.com/larholm/adv/TL006  View
43087 7353 CVE-2003-0526 MS:MS03-028  View
43088 7353 CVE-2003-0526 URL:http://www.microsoft.com/technet/security/bulletin/ms03-028.asp  View
43089 7353 CVE-2003-0526 OVAL:oval:org.mitre.oval:def:117  View

Related JVN