MS05-034: Cumulative security update for Internet Security and Acceleration (ISA) Server 2000

Microsoft has released security bulletin MS05-034. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/default.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/default.mspx)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/MS05-034.mspx (http://www.microsoft.com/technet/security/bulletin/MS05-034.mspx)

Note The following software updates are included in all security update 899753 packages:

• 821724  (http://support.microsoft.com/kb/821724/ ) FIX: Basic credentials may be sent over an external HTTP connection when SSL is required
• 894864  (http://support.microsoft.com/kb/894864/ ) The ISA Firewall service may unexpectedly quit when ISA Server 2000 experiences heavy network traffic
• 897177  (http://support.microsoft.com/kb/897177/ ) ISA Server 2000 unexpectedly allows NetBIOS traffic from all external IP addresses after you configure a packet filter to allow "NetBIOS (all)" traffic from a specific external IP address
• 899807  (http://support.microsoft.com/kb/899807/ ) Credentials that are provided to ISA Server are sent in an unprotected form
• 901117  (http://support.microsoft.com/kb/901117/ ) ISA Server 2000 Web site visitors may be directed to unexpected content