Better safe than sorry
vnunet.com, 17 Nov 2004
Microsoft has re-released a security patch for Internet Security and Acceleration (ISA) Server after a major code revision.
The updated patch, first released on 9 November, is for ISA Server 2000 and Microsoft Proxy Server 2.0. Details can be found here.
Users of Microsoft Small Business Server 2003 Premium Edition and Small Business Server 2000 are also advised to patch since this software uses the ISA code.
The patch is intended to plug a hole that could allow hackers to pretend that their code had been cleared as trusted content.
Microsoft warned that the flaw could be used to allow malicious software to be embedded in web pages that appear legitimate to casual users.
The company has also published a workaround for those unable or unwilling to patch. Microsoft recommends setting the DNS cache size to zero, effectively disabling DNS caching on the affected system.
This would prevent the affected software from using potentially spoofed data from the cache, but may have negative performance impact on DNS resolution.
Lower operational costs for service providers, claims Redmond
Users installing security update by themselves wreak havoc
Financial Services Authority warns SMEs to tighten security
This week we round up the major vendor conference events, plus T-Mobile sells customer data
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Biz Stone says paid-for accounts will give users access to...
EU security agency provides checklist for firms looking to vet...
Do you agree?
Have your say on this article