OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: ISA Server and SQL Injection

From: John Steer (jsteermicrosoft.com)
Date: Mon Feb 14 2005 - 19:48:02 CST

I'm not sure any firewall would stop a SQL Injection attack.

This is an application issue

-----Original Message-----
From: Rafael San Miguel [mailto:smcsocyahoo.es]
Sent: Monday, February 14, 2005 10:06 AM
To: webappsecsecurityfocus.com
Subject: ISA Server and SQL Injection

Hi all,

¿Has anyone tested ISA Server 2004 against SQL
Injection attacks? I mean, ¿can it protect from this
type of vulnerability?

Thanks in advance. Greetings,

Rafael San Miguel Carrasco