A flaw with Microsoft's first security product leaves it vulnerable to denial of service attacks. The problem arises because Microsoft's Internet Security and Acceleration (ISA) Server's Web Proxy service doesn't handle particular requests if they exceed a certain length, causing the program to crash if its Web Publishing features are enabled. In a security notice, Microsoft admitted: "Processing such a [malformed] request would result in an access violation, which would cause the Web Proxy service to fail. This would disrupt all ingoing and outgoing Web proxy requests until the service was restarted."
|