Microsoft

Isa Server

21 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2005-1907

  • EPSS 25.48%
  • Published 31.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.

7.5

CVE-2004-0892

  • EPSS 11.51%
  • Published 27.01.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spo...

6.8

CVE-2003-0526

  • EPSS 52.16%
  • Published 18.08.2003 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleans...

5

CVE-2003-0110

  • EPSS 19.46%
  • Published 05.05.2003 04:00:00
  • Last modified 03.04.2025 01:03:51

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, ma...

5

CVE-2003-0011

  • EPSS 18.32%
  • Published 24.03.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of inc...

7.5

CVE-2002-0371

  • EPSS 65.77%
  • Published 03.07.2002 04:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server ...

5

CVE-2001-1533

  • EPSS 26.89%
  • Published 31.12.2001 05:00:00
  • Last modified 03.04.2025 01:03:51

Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and t...

7.5

CVE-2001-0658

  • EPSS 11.67%
  • Published 20.09.2001 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not pro...

2.1

CVE-2001-0547

  • EPSS 0.45%
  • Published 20.09.2001 04:00:00
  • Last modified 03.04.2025 01:03:51

Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).

5

CVE-2001-0546

  • EPSS 19.07%
  • Published 20.09.2001 04:00:00
  • Last modified 03.04.2025 01:03:51

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.