Page 2 of 21 results (0.010 seconds)

CVSS: 7.5EPSS: 31%CPEs: 1EXPL: 0

31 May 2005 — The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic. • http://securitytracker.com/id?1014113 •

CVSS: 7.5EPSS: 14%CPEs: 7EXPL: 0

16 Nov 2004 — Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results. • http://www.securityfocus.com/bid/11605 •

CVSS: 6.8EPSS: 52%CPEs: 3EXPL: 1

17 Jul 2003 — Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Microsoft Internet Security and Acceleration (ISA) Server 2000 permite a atacantes ... • https://www.exploit-db.com/exploits/22919 •

CVSS: 7.5EPSS: 19%CPEs: 5EXPL: 0

15 Apr 2003 — The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745. El servicio Winsock Proxy en Microsoft Proxy Server 2.0 y el servicio Microsoft Firewall en Internet Security and Acceleration (ISA) Server 2000 permite a atacantes remotos causar una denegación de servicio (consumición de cpu o ... • http://marc.info/?l=bugtraq&m=104994487012027&w=2 •

CVSS: 7.5EPSS: 14%CPEs: 2EXPL: 0

21 Mar 2003 — Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled. Vulnerabilidad desconocida en el filtro de aplicación de detección de intrusos DNS de Microsoft Internet Security and Acceleration (ISA) Server 2000 permite a atacantes remotos causar una denegación de servicio (tr... • http://www.securityfocus.com/bid/7145 •

CVSS: 9.8EPSS: 65%CPEs: 12EXPL: 1

15 Jun 2002 — Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response. Desbordamiento de búfer en el cliente gopher de Microsoft Internet Explorer 5.1 a la 6.0, Proxy Server 2.0, o ISA Server 2000 permite a atacantes remotos la ejecución de código arbitrario mediante una URL gopher:// que redirige al usu... • https://www.exploit-db.com/exploits/21510 •

CVSS: 5.3EPSS: 34%CPEs: 1EXPL: 0

31 Dec 2001 — Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE • http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html •

CVSS: 7.5EPSS: 19%CPEs: 1EXPL: 0

20 Sep 2001 — Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data. • http://www.securityfocus.com/bid/3196 •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

20 Sep 2001 — Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion). • http://www.securityfocus.com/bid/3197 •

CVSS: 7.5EPSS: 11%CPEs: 1EXPL: 0

20 Sep 2001 — Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message. • http://www.securityfocus.com/bid/3198 •