Lucene search

K
MicrosoftIsa Server2000

13 matches found

CVE
CVE
added 2002/07/03 4:0 a.m.56 views

CVE-2002-0371

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.

7.5CVSS7.8AI score0.6577EPSS
CVE
CVE
added 2003/08/18 4:0 a.m.48 views

CVE-2003-0526

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "50...

6.8CVSS6AI score0.52159EPSS
CVE
CVE
added 2005/01/27 5:0 a.m.47 views

CVE-2004-0892

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

7.5CVSS6.5AI score0.11507EPSS
CVE
CVE
added 2005/06/08 4:0 a.m.47 views

CVE-2005-1907

The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.

5CVSS6.6AI score0.25484EPSS
CVE
CVE
added 2003/03/24 5:0 a.m.44 views

CVE-2003-0011

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.

5CVSS6.6AI score0.14786EPSS
CVE
CVE
added 2005/07/14 4:0 a.m.43 views

CVE-2001-1533

Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. The...

5.3CVSS6.9AI score0.34428EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.39 views

CVE-2001-0546

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.

5CVSS6.5AI score0.19067EPSS
CVE
CVE
added 2003/05/05 4:0 a.m.39 views

CVE-2003-0110

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.

5CVSS6.6AI score0.19456EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.37 views

CVE-2001-0658

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.

7.5CVSS6.8AI score0.11669EPSS
CVE
CVE
added 2005/06/14 4:0 a.m.35 views

CVE-2005-1216

Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.

7.5CVSS6.5AI score0.33901EPSS
CVE
CVE
added 2002/03/09 5:0 a.m.34 views

CVE-2001-0547

Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).

2.1CVSS6.6AI score0.00521EPSS
CVE
CVE
added 2001/09/18 4:0 a.m.32 views

CVE-2001-0239

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

7.5CVSS7AI score0.20481EPSS
CVE
CVE
added 2005/06/14 4:0 a.m.32 views

CVE-2005-1215

Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.

7.5CVSS6.6AI score0.12768EPSS