PT-2004-1928 · Microsoft · Isa Server+1

Martijn De Vries + 1 · Publicado 2004-11-16 · Atualizado 2018-10-12 · CVE-2004-0892

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Proxy Server version 2.0 Microsoft ISA Server version 2000

Description: The issue allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Recommendations: For Microsoft Proxy Server version 2.0, update the software to prevent spoofed reverse DNS lookup results. For Microsoft ISA Server version 2000, update the software to prevent spoofed reverse DNS lookup results.

Correção

Identificadores relacionados

CVE-2004-0892

Produtos afetados

Isa Server

Proxy Server

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0892 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17906 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264 · Nota
• http://securityfocus.com/bid/11605 · Aviso do Fabricante