CVE-2007-4991

Currently unrated

Key Information:

Vendor
Microsoft
Status
Isa Server
Vendor
CVE Published:
21 September 2007

Summary

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.

References

http://www.securityfocus.com/bid/25753
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1018727
vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-07-053.html
x_refsource_MISC

EPSS Score

72% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.