Secunia

Ory Segal has reported multiple vulnerabilities in Microsoft SharePoint Portal Server 2001, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerabilities are caused due to insufficient input validation in three scripts included with the product. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Successful exploitation may result in exposure of various information (e.g. cookie-based authentication information) associated with the site running Microsoft SharePoint Portal Server 2001 or inclusion of malicious content, which the user thinks is part of the real website.

Solution
Apply Service Pack 3.
Further details available in Customer Area

Provided and/or discovered by
Ory Segal, Sanctum inc.

Deep Links
Links available in Customer Area