CVE-2005-1907

CVE-2005-1907 affects the ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000. The issue allows remote attackers to cause a denial of service (Wspsrv.exe crash) by sending a large volume of SecureNAT traffic. The connected Nessus entry MS05-034 (ISA Server 2000 ...

[NT] Microsoft ISA Server 2000 DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Microsoft ISA Server 2000 firewall DoS

Microsoft Internet Security and Acceleration Server's Firewall crashes when heavy network traffic is received from a SecureNAT client...

CVE-2005-1907

The ISA Firewall service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service Wspsrv.exe crash via a large amount of SecureNAT network traffic...

CVE-2004-0892

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results...

CVE-2004-0892

CVE-2004-0892 describes a spoofing vulnerability in ISA Server 2000 and Proxy Server 2.0 (also in Small Business Server 2000/2003 Premium) where reverse-DNS cache results can be manipulated to spoof trusted Internet content on a crafted page. Connected data confirms the bug exists in these produc...

MS04-039: ISA Server 2000 and Proxy Server 2.0 Internet Content Spoofing (888258)

The remote host is running ISA Server 2000, an HTTP proxy. The remote version of this software is vulnerable to content spoofing attacks. An attacker could lure a victim to visit a malicious website and the user could believe is visiting a trusted web site. C Tenable Network Security, Inc...

Microsoft Security Bulletin MS04-039

Microsoft Security Bulletin MS04-039 Vulnerability in ISA Server 2000 and Proxy Server 2.0 Could Allow Internet Content Spoofing 888258 Issued: November 9, 2004 Updated: November 9, 2004 Version: 2.0 Summary Who should read this document: Customers who use Microsoft Proxy Server 2.0 or Microsoft...

Microsoft ISA 2000 DNS cache poisoning

Content spoofing by DNS cache poisoning...

Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability

Description Microsoft ISA and Proxy Server are reportedly prone to a Web site spoofing vulnerability. Successful exploitation of this issue could allow a remote attacker to spoof a trusted Web site. If a connection were made to the spoofed Web site using SSL, the malicious site would not be able ...

ISA Server 2000 Service Pack 2 Release Notes

ISA Server 2000 Service Pack 2 Release Notes SUMMARY Microsoft Internet Security and Acceleration ISA Server 2000 Service Pack 2 SP2 includes all the hotfixes and security bulletins that are released for ISA Server 2000, including all the hotfixes and security bulletins that were released as part...

Multiple ISA server bugs

ISA SP2 closes few security holes: buffer overflow during redirect from denied resource, basic credentials may be sent over an External HTTP connection when SSL is required for published server, FTP bounce attack, handles leak in message screener, etc...

Microsoft Private Communication Technology (PCT) fails to properly validate message inputs

Overview A vulnerability exists in the Private Communications Transport PCT protocol, which is part of the Microsoft Secure Sockets Layer SSL library. Exploitation of this vulnerability may permit a remote attacker to compromise the system. An exploit for this issue currently being used to...

MS04-001: Vulnerability in Microsoft ISA Server 2000 H.323 Filter(816458)

A buffer overflow vulnerability in the H.323 filter of the Microsoft ISA Server 2000 allows an attacker to execute arbitrary code on the remote host. An attacker can exploit this vulnerability by sending a specially crafted packet to the remote ISA Server. C Tenable Network Security, Inc...

Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability

Description It has been reported that the H.323 filter used by Microsoft ISA Server 2000 is prone to a remote buffer overflow vulnerability. The condition presents itself due to insufficient boundary checks performed by the Microsoft Firewall Service on specially crafted H.323 traffic. Successful...

CVE-2003-0526

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...

CVE-2003-0526

Cross-site scripting XSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages 1 500.htm for "500...

CVE-2003-0526

The CVE-2003-0526 entry describes a cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. The flaw allows remote attackers to inject arbitrary web script via a URL whose domain name portion contains the attack payload. The vulnerability arises...

Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...

Microsoft Security Bulletin MS03-028: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (Q816456)

-----BEGIN PGP SIGNED MESSAGE----- - - --------------------------------------------------------------- Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack 816456 Date: 16 July 2003 Software: Microsoftr ISA Server Max Risk: Important Bulletin: MS03-028 Microsoft encourage...