EUVD-2001-0539

Malware in sbrugna...

Microsoft ISA Server 2000站点和内容规则绕过漏洞

Microsoft Internet Security和Acceleration Server 2000是一款微软开发的防火墙和代理服务器程序。 Microsoft ISA Server的站点和内容访问规则实现存在问题，远程攻击者可以利用这个漏洞绕过这些规则，访问限制资源。 如果在请求的域名增加点'.'字符，可绕过代理服务器的过滤器，访问管理员规定的限制的资源和内容。如站点和内容规则设置对www.example.com进行拒绝访问，但是用户可以通过如下格式访问目标地址： www.example.com. Microsoft ISA Server 2000 Microsoft ISA...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. An attacker who successfully exploited...

Vulnerability in Microsoft ISA Server 2000 H.323 Filter (816458)

A security vulnerability exists in the H.323 filter for Microsoft Internet Security and Acceleration Server 2000 that could allow an attacker to overflow a buffer in the Microsoft Firewall Service in Microsoft Internet Security and Acceleration Server 2000. SPDX-FileCopyrightText: 2004 Jeff Adams...

CVE-2001-1533

CVE-2001-1533 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. A denial of service can be triggered by a flood of fragmented UDP packets. Several sources note the vendor disputes the issue, claiming it requires high bandwidth and does not cause instability, suggesting it ma...

CVE-2001-1533: Undefined Security Weakness

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

Microsoft Security Bulletin MS05-034 Cumulative Security Update for ISA Server 2000 (899753)

Microsoft Security Bulletin MS05-034 Cumulative Security Update for ISA Server 2000 899753 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Internet Security and Acceleration ISA Server 2000 Impact of Vulnerability: Elevation of Privilege Maxim...

CVE-2005-1215

Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers...

CVE-2005-1215

CVE-2005-1215 relates to ISA Server 2000's handling of HTTP requests with multiple Content-Length headers, enabling remote attackers to poison the cache or bypass content restrictions. The vulnerability arises from malformed HTTP content-length processing, potentially causing cached or redirected...

CVE-2005-1216

Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...

MS05-034: Cumulative Update for ISA Server 2000 (899753)

The remote host is missing a cumulative update for ISA Server 2000 that fixes several security flaws that could allow an attacker to elevate his privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18487; scriptversion"1.37"; scriptcvsdate"Date: 2018/11/15...

CVE-2005-1216: Undefined Security Weakness

Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...

CVE-2005-1215: Undefined Security Weakness

Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers...

CVE-2005-1907

The ISA Firewall service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service Wspsrv.exe crash via a large amount of SecureNAT network traffic...

CVE-2005-1907: Undefined Security Weakness

The ISA Firewall service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service Wspsrv.exe crash via a large amount of SecureNAT network traffic...

[NT] Microsoft ISA Server 2000 DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft ISA Server 2000 firewall DoS

Microsoft Internet Security and Acceleration Server's Firewall crashes when heavy network traffic is received from a SecureNAT client...

CVE-2005-1907

The ISA Firewall service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service Wspsrv.exe crash via a large amount of SecureNAT network traffic...

CVE-2004-0892: Undefined Security Weakness

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results...

Microsoft Private Communication Technology (PCT) fails to properly validate message inputs

Overview A vulnerability exists in the Private Communications Transport PCT protocol, which is part of the Microsoft Secure Sockets Layer SSL library. Exploitation of this vulnerability may permit a remote attacker to compromise the system. An exploit for this issue currently being used to...