Cross-site Scripting Vulnerability in Microsoft ISA Server 2000

CVE-2001-0658

Summary

A cross-site scripting vulnerability exists in Microsoft Internet Security and Acceleration (ISA) Server 2000, permitting remote attackers to execute scripts or access cookies of users by manipulating an error message that improperly handles URLs. When users encounter a crafted URL that is not appropriately quoted, they may unknowingly execute malicious scripts, leading to potential data exposure or session hijacking. This vulnerability highlights the importance of robust input validation and security practices in web applications.

References