Denial of Service Vulnerability in Microsoft ISA Server 2000

CVE-2001-1533

Summary

Microsoft Internet Security and Acceleration (ISA) Server 2000 is susceptible to a denial of service (DoS) vulnerability that can be triggered by remote attackers utilizing a flood of fragmented UDP packets. While the vendor claims the issue demands high bandwidth for successful exploitation, and asserts that it does not lead to server instability, the theoretical risk of performance degradation remains a concern for network administrators. Organizations using this product should be aware of the potential implications and consider implementing appropriate network defenses.

References