Searching acceleration software vulnerabilities

** DISPUTED * Microsoft Internet Security and A

Acceleration | Microsoft | Security | DISPUTED | Internet |

** DISPUTED * Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE.


Unknown vulnerability in the DNS intrusion dete

vulnerability | Acceleration | application | Microsoft | detection | intrusion | Security | Internet | Unknown | filter | DNS |

Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.


The Winsock Proxy service in Microsoft Proxy Se

Acceleration | Microsoft | Firewall | Internet | Security | service | Winsock | Server | Proxy |

The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.


Cross-site scripting (XSS) vulnerability in Mic

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."


Buffer overflow in the H.323 filter of Microsof

Acceleration | Microsoft | Internet | Security | overflow | Buffer | Server | filter | H323 |

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.


Microsoft Internet Security and Acceleration (I

Acceleration | Microsoft | Security | Internet |

Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. NOTE: as of Saturday, July 15, 2006, this could not be reproduced by third parties.


Microsoft Internet Security and Acceleration (I

Acceleration | Microsoft | Security | Internet |

Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.


The SOCKS4 Proxy in Microsoft Internet Security

Acceleration | Microsoft | Security | Internet | SOCKS4 | Proxy |

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.


Software vulnerabilities results 1 to 9 of 9     
Page: 1