Vulnerability Development: Re: MSProxy Server 2

From: Bryce Walter <brycewalter_at_HOTMAIL.COM>
Date: Fri, 2 Jun 2000 15:37:25 GMT

Proxy 2 runs as an ISAPI application on top of IIS 3/4/5. Many of the holes
that affect IIS will also take down Proxy... buffer overflows, etc.

>
>Is anyone aware of any security holes in MSProxy Server 2.0? I've been
>studying for the exam and reallized that you can use a proxy client to get
>easier access to a remote network or site by entering in the remote ip into
>the client or proxy's LAT file and supplying the appropriate routing
>information in your routing table. In effect makeing your network think
>that
>the remote network is part of your local net. If anyone has seen anything
>like this will you please let me know.
>
>Logicbug

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
Received on Jun 02 2000