Microsoft ISA Server Proxy Service Memory Leak Denial of Service Vulnerability

Bugtraq ID:	3197
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 16 2001 12:00AM
Updated:	Aug 16 2001 12:00AM
Credit:	This vulnerability was reported to Microsoft by Peter Grundl.
Vulnerable:	Microsoft ISA Server 2000 + Microsoft Small Business Server 2000 0 + Microsoft Small Business Server 2003 Premium Edition - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Server
Not Vulnerable:

Microsoft ISA Server Proxy Service Memory Leak Denial of Service Vulnerability

A vulnerability exists in Microsoft ISA Server's Proxy Service which is responsible for sharing HTTP access through the firewall.

A certain type of malformed data can cause a memory leak resulting in an eventual denial of service.

It is important to note that this vulnerability is only available to users inside the network. Attackers from the Internet could not exploit this vulnerability.

Microsoft ISA Server Proxy Service Memory Leak Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft ISA Server Proxy Service Memory Leak Denial of Service Vulnerability

References:

• Microsoft Security Bulletin MS01-045 (Microsoft)
  
• Microsoft Technet Security (Microsoft)