Microsoft Windows 2000 Advanced Server Patch: Levy Requests as User Security Vulnerability

Windows 2000 Update.
Download

Microsoft Windows 2000 Advanced Server Patch: Levy Requests as User Security Vulnerability Ranking & Summary

Advertisement

  • Rating:
  • License:
  • Update
  • Publisher Name:
  • Microsoft
  • Publisher web site:
  • http://www.microsoft.com/
  • Operating Systems:
  • Windows 98, Windows 2000, Windows XP

Microsoft Windows 2000 Advanced Server Patch: Levy Requests as User Security Vulnerability Tags


Microsoft Windows 2000 Advanced Server Patch: Levy Requests as User Security Vulnerability Description

From Microsoft: The Microsoft Data Access Component Internet Publishing Provider provides access to WebDAV resources over the Internet. By design, it should differentiate between requests made by a user and those made by script running in the user�??s browser. However, because of an implementation flaw, it handles all requests in the security context of the user. As a result, if a user browsed to a web page or opened an HTML e-mail that contained script, that script could access web-based resources as the user.


Microsoft Windows 2000 Advanced Server Patch: Levy Requests as User Security Vulnerability Related Software