MS09-016: Description of the ISA Server 2006 hotfix package: April 14, 2009

Resolves vulnerabilities that may cause ISA Server 2006 stop accepting new requests.INTRODUCTIONMicrosoft has released security bulletin MS09-016. To view the complete security bulletin, visit one of the following Microsoft Web sites:Home...

MS09-016: Vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway Could Cause Denial of Service (961759)

The version of Microsoft ISA Server or Forefront Threat Management Gateway installed on the remote host is affected by one or both of the following vulnerabilities : - By sending a series of specially crafted packets, an anonymous remote attacker can create orphaned open sessions in the firewall...

After attacks, Microsoft readies security patches

From CIO Robert McMillan Corporate IT staffers will get a double whammy next week, as both Microsoft and Oracle are set to release critical security updates cio.com on the same day, including a likely fix for an Excel bug that has been used by cybercriminals. This month, Oracle’s quarterly softwa...

Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference

Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...

Microsoft ISA Server H.323 Gatekeeper内存泄漏漏洞(MS01-045)

BUGTRAQ ID: 3196 CVECAN ID: CVE-2001-0546 Microsoft ISA Server中所带的一个服务：H.323 Gatekeeper存在一个拒绝服务漏洞，这 个服务支持"voice-over-IP"数据通过ISA防火墙传输。它包含一个内存泄漏问题，当发送 特定类型的畸形H.323数据时就会触发内存泄漏。如果攻击者持续发送大量的畸形数据， 就可以消耗大量的服务器内存，并使性能严重下降以至中止所有通过防火墙的通信。 Microsoft ISA Server 2000 - Microsoft Windows 2000...

ZDI-07-053: Microsoft ISA Server SOCKS4 Proxy Connection Leakage

ZDI-07-053: Microsoft ISA Server SOCKS4 Proxy Connection Leakage http://www.zerodayinitiative.com/advisories/ZDI-07-053.html September 20, 2007 -- CVE ID: CVE-2007-4991 -- Affected Vendor: Microsoft -- Affected Products: ISA Server 2004 SP1 ISA Server 2004 SP2 -- TippingPointTM IPS Customer...

Microsoft ISA Server SOCKS4代理连接远程信息泄露漏洞

Microsoft ISA Server是一款企业防火墙、虚拟专用网（VPN）和Web缓存解决方案。 Microsoft ISA Server SOCKS4代理存在设计错误，远程攻击者可以利用漏洞获得IP地址敏感信息。 发送给空报文给ISA Server SOCKS4代理，服务器会返回包含上一个代理的IP地址信息给攻击者，导致敏感信息泄露。 Microsoft ISA Server 2004 SP2 Microsoft ISA Server 2004 SP1 补丁下载： Microsoft ISA Server 2004 SP2 Microsoft Microsoft Internet...

Design/Logic Flaw

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration ISA Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information the destination IP address of another user's session via an empty packet...

CVE-2007-4991

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration ISA Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information the destination IP address of another user's session via an empty packet...

CVE-2007-4991

The CVE-2007-4991 issue affects Microsoft ISA Server 2004 SP1 and SP2, where the SOCKS4 Proxy can leak the destination IP address of another user’s session. The root cause is that an empty packet to the SOCKS4 proxy elicits a response containing the last IP address proxied through the server. Imp...

CVE-2007-4991

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration ISA Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information the destination IP address of another user's session via an empty packet...

Microsoft ISA Server SOCKS4 Proxy Connection Leakage Vulnerability

This vulnerability allows remote attackers to extract IP addresses visited through the SOCKS4 Proxy on vulnerable ISA Server installations. Authentication is not required to exploit this vulnerability. This specific flaw exists when an empty packet is sent to the SOCKS4. The server will return a...

CVE-2006-7027

Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...

CVE-2006-7027

CVE-2006-7027 concerns Microsoft Internet Security and Acceleration (ISA) Server 2004. The vulnerability arises when the Host header contains unusual ASCII characters (including a tab), enabling remote attackers to manipulate portions of the log file and potentially leverage it for further attack...

CVE-2006-7027

Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...

Microsoft ISA Server NetBIOS预定义过滤策略绕过漏洞(MS05-034)

ISA Server是微软产品家族之一，可以提供企业防火墙和高性能的Web缓存。 ISA Server 2000中存在权限提升漏洞，成功利用这个漏洞可以绕过策略限制。 攻击者可以利用NetBIOSall预定义报文过滤同ISA Server创建NetBIOS连接。 Microsoft ISA Server 2000 SP2 Microsoft已经为此发布了一个安全公告（MS05-034）以及相应补丁: MS05-034：Cumulative Security Update for ISA Server 2000 899753...

Microsoft ISA Server 2000站点和内容规则绕过漏洞

Microsoft Internet Security和Acceleration Server 2000是一款微软开发的防火墙和代理服务器程序。 Microsoft ISA Server的站点和内容访问规则实现存在问题，远程攻击者可以利用这个漏洞绕过这些规则，访问限制资源。 如果在请求的域名增加点'.'字符，可绕过代理服务器的过滤器，访问管理员规定的限制的资源和内容。如站点和内容规则设置对www.example.com进行拒绝访问，但是用户可以通过如下格式访问目标地址： www.example.com. Microsoft ISA Server 2000 Microsoft ISA...

CVE-2006-3652

Microsoft Internet Security and Acceleration ISA Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "" character. NOTE: as of 20060715, this could not be reproduced by third parties...

CVE-2006-3652

Microsoft Internet Security and Acceleration ISA Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "" character. NOTE: as of 20060715, this could not be reproduced by third parties...

CVE-2006-3652

Microsoft Internet Security and Acceleration (ISA) Server 2004 is affected by CVE-2006-3652, where remote attackers can bypass file extension filters by issuing a request with a trailing character '#'. The provided sources describe the vulnerability as a filter bypass but do not specify affected ...