Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
BID:10477
Info
Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
| Bugtraq ID: | 10477 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 21 2003 12:00AM |
| Updated: | Apr 21 2003 12:00AM |
| Credit: | This issue was disclosed in a Microsoft Knowledge Base Article. |
| Vulnerable: |
Microsoft ISA Server 2000 SP1 Microsoft ISA Server 2000 FP1 Microsoft ISA Server 2000 |
| Not Vulnerable: |
Microsoft ISA Server 2000 SP2 |
Discussion
Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
Microsoft ISA Server Web Proxy is prone to a remote denial of service vulnerability. The issue presents itself when the proxy service receives a malformed SSL packet. An exceptional condition occurs in the server leading to a crash.
Microsoft ISA Server 2000 and 2000 SP1 are affected by this vulnerability.
Microsoft ISA Server Web Proxy is prone to a remote denial of service vulnerability. The issue presents itself when the proxy service receives a malformed SSL packet. An exceptional condition occurs in the server leading to a crash.
Microsoft ISA Server 2000 and 2000 SP1 are affected by this vulnerability.
Exploit / POC
Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
Solution:
Microsoft has released ISA Server Service Pack 2 to address this issue:
Microsoft ISA Server 2000 SP1
Solution:
Microsoft has released ISA Server Service Pack 2 to address this issue:
Microsoft ISA Server 2000 SP1
-
Microsoft Internet Security and Acceleration (ISA) Server 2000 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyID=c8d3d98b-1cd4 -406a-a04a-2aa2547d09a3&DisplayLang=en
References
Microsoft ISA Server Web Proxy Malformed SSL Packet Remote Denial of Service Vulnerability
References:
References:
- Knowledge Base Article - 319374 (Microsoft)