CVE-2003-0526

The CVE-2003-0526 entry describes a cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. The flaw allows remote attackers to inject arbitrary web script via a URL whose domain name portion contains the attack payload. The vulnerability arises...

CVE-2003-0526: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...

Microsoft ISA Server 2000 - Cross-Site Scripting

Microsoft ISA Server 2000 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8207/info ISA server will output certain error pages when requests that are invalid, for whatever reason, are transmitted through it. These error pages will appear in the context of the domain that the...

CVE-2003-0110: Undefined Security Weakness

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration ISA Server 2000 allow remote attackers to cause a denial of service CPU consumption or packet storm via a spoofed, malformed packet to UDP port 1745...

CVE-2003-0011

Microsoft ISA Server DNS – Denial Of Service (MS03-009): A vulnerability exists in the ISA Server 2000 DNS intrusion detection application filter that can be exploited by a specially formed DNS request to cause a denial of service in DNS services. Public references describe that the attacker can ...

CVE-2003-0011: Undefined Security Weakness

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service blocked traffic to DNS servers via a certain type of incoming DNS request that is not properly handled...

CVE-2002-0371: Undefined Security Weakness

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response...

CVE-2001-0546

The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2001-0658: Undefined Security Weakness

Cross-site scripting CSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message...

CVE-2001-0547: Undefined Security Weakness

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-0546: Undefined Security Weakness

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-0239: Undefined Security Weakness

Microsoft Internet Security and Acceleration ISA Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type...

Security Bulletin MS01-045

---------------------------------------------------------------------- Title: ISA Server H.323 Gatekeeper Service Contains Memory Leak Date: 16 August 2001 Software: ISA Server 2000 Impact: Denial of service, cross-site scripting Bulletin: MS01-045 Microsoft encourages customers to review the...

Security Bulletin MS01-021

---------------------------------------------------------------------- Title: Invalid Web Request Can Cause Access Violation in ISA Server Web Proxy Service Date: 16 April 2001 Software: ISA Server 2000 Impact: Denial of service Bulletin: MS01-021 Microsoft encourages customers to review the...