|
Family: Windows : Microsoft Bulletins --> Category: infos
Microsoft ISA Server Winsock Proxy DoS (MS03-012) Vulnerability Scan
Vulnerability Scan Summary Checks for ISA Server HotFix SP1-257
Detailed Explanation for this Vulnerability Test
Synopsis :
It is possible to crash the remote proxy server.
Description :
A vulnerability in Microsoft Proxy Server 2.0 and ISA Server 2000
allows a possible hacker to cause a denial of service of the remote Winsock
proxy service by sending a specially crafted packet which would cause
100% CPU utilization on the remote host and make it unresponsive.
Solution :
Microsoft has released a set of patches for ISA Server 2000 :
http://www.microsoft.com/technet/security/bulletin/ms03-012.mspx
Threat Level:
Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:N/A:C/I:N/B:A)
Click HERE for more information and discussions on this network vulnerability scan.
|