CVE-2001-0658: High severity Microsoft ISA Server vulnerability
Published Sep 20, 2001
·Updated
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
Affected Software
1 affected component
Microsoft ISA Server=2000
Event History
Sep 20, 2001
CVE Published
04:00 AM
Mar 9, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0658?
The severity of CVE-2001-0658 is classified as high due to the potential for remote attackers to execute malicious scripts.
2
How do I fix CVE-2001-0658?
To fix CVE-2001-0658, it is recommended to apply the latest security updates from Microsoft for ISA Server 2000.
3
What software versions are affected by CVE-2001-0658?
CVE-2001-0658 specifically affects Microsoft ISA Server 2000.
4
What type of vulnerability is CVE-2001-0658?
CVE-2001-0658 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2001-0658 lead to data theft?
Yes, CVE-2001-0658 can potentially allow attackers to read cookies, leading to data theft.