Spoofing Vulnerability in Microsoft Proxy Server and ISA Server

CVE-2004-0892

Summary

A vulnerability in Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 enables remote attackers to exploit spoofed reverse DNS lookup results. This allows them to present untrusted Internet content as if it were from a trusted source via specially crafted web pages. Both Small Business Server 2000 and Small Business Server 2003 Premium Edition are affected, potentially exposing users to phishing attempts and other malicious activities.

References