PT-2004-1928 · Microsoft · Isa Server+1

Martijn De Vries + 1 · Published 2004-11-16 · Updated 2018-10-12 · CVE-2004-0892

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Proxy Server version 2.0 Microsoft ISA Server version 2000

Description: The issue allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Recommendations: For Microsoft Proxy Server version 2.0, update the software to prevent spoofed reverse DNS lookup results. For Microsoft ISA Server version 2000, update the software to prevent spoofed reverse DNS lookup results.

Fix

Related Identifiers

CVE-2004-0892

Affected Products

Isa Server

Proxy Server

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0892 · Security Note
• http://securityfocus.com/bid/11605 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17906 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264 · Note