CVE-2003-0526: XSS

Published Jul 17, 2003

Updated

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."

Affected Software

3 affected components

Microsoft ISA Server=2000-sp1

Microsoft ISA Server=2000-fp1

Microsoft ISA Server=2000

Event History

Jul 17, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Aug 18, 2003

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0526?

CVE-2003-0526 has a moderate severity level due to its cross-site scripting vulnerability.

How do I fix CVE-2003-0526?

To fix CVE-2003-0526, apply the latest service packs or updates for Microsoft ISA Server 2000.

What are the affected versions of Microsoft ISA Server for CVE-2003-0526?

CVE-2003-0526 affects Microsoft ISA Server 2000, including versions 2000 SP1 and 2000 FP1.

What type of vulnerability is CVE-2003-0526?

CVE-2003-0526 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.

Can CVE-2003-0526 be exploited remotely?

Yes, CVE-2003-0526 can be exploited remotely through specially crafted URLs.