Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
BID:7145
Info
Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
| Bugtraq ID: | 7145 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2003-0011 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 19 2003 12:00AM |
| Updated: | Jul 11 2009 09:06PM |
| Credit: | Discovery is credited to Mike Fratto of Network Computing Magazine. |
| Vulnerable: |
Microsoft ISA Server 2000 SP1 Microsoft ISA Server 2000 |
| Not Vulnerable: | |
Discussion
Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
Microsoft ISA Server is vulnerable to a denial of service attack that could prevent the server from forwarding DNS requests to the published internal DNS server. If a specifically malformed request is sent to the ISA server, the DNS forwarding would fail, preventing external hosts from accessing the internal DNS server.
This vulnerability is only present when the DNS intrusion detection application filter is applied on the ISA server.
Microsoft ISA Server is vulnerable to a denial of service attack that could prevent the server from forwarding DNS requests to the published internal DNS server. If a specifically malformed request is sent to the ISA server, the DNS forwarding would fail, preventing external hosts from accessing the internal DNS server.
This vulnerability is only present when the DNS intrusion detection application filter is applied on the ISA server.
Exploit / POC
Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
Solution:
Microsoft has released a fix:
Microsoft ISA Server 2000 SP1
Microsoft ISA Server 2000
Solution:
Microsoft has released a fix:
Microsoft ISA Server 2000 SP1
-
Microsoft isahf256
Please note that there are several localized versions of the patch.
http://microsoft.com/downloads/details.aspx?FamilyId=F62127C5-51E3-4B3 4-A6D3-B9CF840358BD&displaylang=en
Microsoft ISA Server 2000
-
Microsoft isahf256
Please note that there are several localized versions of the patch.
http://microsoft.com/downloads/details.aspx?FamilyId=F62127C5-51E3-4B3 4-A6D3-B9CF840358BD&displaylang=en
References
Microsoft ISA Server DNS Intrusion Filter Denial of Service Vulnerability
References:
References:
- Microsoft Security Bulletin MS03-009 (Microsoft)