Microsoft Internet Security and Acceleration (ISA) Server 2000 is prone to a vulnerability that may permit malicious users to bypass administrator defined Site and Content rules. The result of this problem is that URIs may bypass the proxy server's filter if they include an extraneous period character after the domain. This may let users circumvent security policy and gain access to remote sites that have been restricted by the proxy server.
Microsoft Internet Security and Acceleration (ISA) Server 2000 is prone to a vulnerability that may permit malicious users to bypass administrator defined Site and Content rules. The result of this problem is that URIs may bypass the proxy server's filter if they include an extraneous period character after the domain. This may let users circumvent security policy and gain access to remote sites that have been restricted by the proxy server.