CVE-2002-0371

CVE-2002-0371 corresponds to a buffer overflow in the gopher client handling responses in Microsoft Internet Explorer (5.1–6.0) and related components (Proxy Server 2.0, ISA Server 2000). The CERT/CC entry (VU-440275) describes an overflow when processing gopher replies, allowing arbitrary code e...

Microsoft Internet Explorer, Microsoft Proxy & Microsoft ISA server buffer overflow gopher buffer overflow

No description provided...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2001-0658

CVE-2001-0658 affects Microsoft Internet Security and Acceleration (ISA) Server 2000. The issue is a cross-site scripting (CSS) vulnerability where malicious script delivered in an invalid URL, not properly quoted in an error message, can cause other clients to execute scripts or read cookies. Th...

CVE-2001-0546

The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...

CVE-2001-0546

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-0658

Cross-site scripting CSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message...

CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-1533

Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability...

Microsoft ISA Server Fragmented Udp Flood Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---- Microsoft ISA Server Fragmented Udp Flood Vulnerability ---- - ---- Type A system resource is exhausted. - ---- Summary A fragmented Udp attack through the microsoft isa server makes the system hampered by using the cpu at 100. Meanwhile server...

CVE-2001-0546

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

Security Bulletin MS01-045

---------------------------------------------------------------------- Title: ISA Server H.323 Gatekeeper Service Contains Memory Leak Date: 16 August 2001 Software: ISA Server 2000 Impact: Denial of service, cross-site scripting Bulletin: MS01-045 Microsoft encourages customers to review the...

CVE-2001-0239

Microsoft Internet Security and Acceleration ISA Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type...

[SX-20010320-2b] - Followup re. Microsoft ISA Server Denial of Service

FSC Internet Corp. / SecureXpert Labs Advisory SX-20010320-2b This is a follow-up to: SX-20010320-2 Denial of Service in Microsoft ISA server v1.0 Several individuals have pointed out an easier exploit scenario for this vulnerability, which additionally does NOT require the Web Publishing feature...

[SX-20010320-2] - Microsoft ISA Server Denial of Service

FSC Internet Corp. / SecureXpert Labs Advisory SX-20010320-2 Denial of Service in Microsoft ISA server v1.0 Summary Microsoft ISA Server 1.0 on Windows 2000 Server SP1 is vulnerable to a simple network-based attack which stops all incoming and outgoing web traffic from passing through the firewal...

ISA.dos.txt

FSC Internet Corp. / SecureXpert Labs Advisory SX-20010320-2 Denial of Service in Microsoft ISA server v1.0 Summary Microsoft ISA Server 1.0 on Windows 2000 Server SP1 is vulnerable to a simple network-based attack which stops all incoming and outgoing web traffic from passing through the firewal...

Microsoft ISA Server 2000 Web Proxy - Denial of Service

Microsoft ISA Server 2000 Web Proxy - Denial of Service // source: https://www.securityfocus.com/bid/2600/info It is possible for a user to cause the Web Proxy service on a host running MS ISA Server to stop responding. If a HTTP request with an unusually long path is submitted, the Web Proxy...

Security Bulletin MS01-021

---------------------------------------------------------------------- Title: Invalid Web Request Can Cause Access Violation in ISA Server Web Proxy Service Date: 16 April 2001 Software: ISA Server 2000 Impact: Denial of service Bulletin: MS01-021 Microsoft encourages customers to review the...

Microsoft ISA Server 2000 Web Proxy - Denial of Service

// source: https://www.securityfocus.com/bid/2600/info It is possible for a user to cause the Web Proxy service on a host running MS ISA Server to stop responding. If a HTTP request with an unusually long path is submitted, the Web Proxy service could stop responding. This vulnerability is only...