Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
BID:13846
Info
Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
| Bugtraq ID: | 13846 |
| Class: | Unknown |
| CVE: |
CVE-2005-1907 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2005 12:00AM |
| Updated: | Jul 12 2009 02:56PM |
| Credit: | Juha-Matti Laurio is credited for the discovery of this vulnerability. |
| Vulnerable: |
Microsoft ISA Server 2000 SP2 Microsoft ISA Server 2000 SP1 Microsoft ISA Server 2000 FP1 Microsoft ISA Server 2000 |
| Not Vulnerable: | |
Discussion
Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
Microsoft ISA Server 2000 is prone to a remote unspecified denial of service vulnerability when handling SecureNAT clients.
The issue presents itself when heavy traffic originating from SecureNAT clients is handled by the affected application. In certain unspecified conditions, ISA server may crash, as the 'Wspsrv.exe' service triggers an access violation error.
This vulnerability allows attackers to crash the affected firewall service, denying service to legitimate users.
Microsoft ISA Server 2000 is prone to a remote unspecified denial of service vulnerability when handling SecureNAT clients.
The issue presents itself when heavy traffic originating from SecureNAT clients is handled by the affected application. In certain unspecified conditions, ISA server may crash, as the 'Wspsrv.exe' service triggers an access violation error.
This vulnerability allows attackers to crash the affected firewall service, denying service to legitimate users.
Exploit / POC
Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
Solution:
Microsoft has released a Knowledge Base article (894864), along with a hotfix to address this issue. Please see the referenced article for further information.
The vendor advises users to contact Microsoft Product Support Services to obtain the hotfix.
Solution:
Microsoft has released a Knowledge Base article (894864), along with a hotfix to address this issue. Please see the referenced article for further information.
The vendor advises users to contact Microsoft Product Support Services to obtain the hotfix.
References
Microsoft ISA Server SecureNAT Unspecified Denial Of Service Vulnerability
References:
References:
- Knowledge Base Article - 894864 (Microsoft)
- Networksecurity.fi Security Advisory (02-06-2005) (Juha-Matti Laurio)