PT-2005-2230 · Microsoft · Isa Server 2000

Steve Orrin · Published 2005-06-14 · Updated 2018-10-12 · CVE-2005-1216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft ISA Server 2000

Description The issue allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.

Recommendations For Microsoft ISA Server 2000, consider restricting access to the NetBIOS protocol to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1216

Affected Products

Isa Server 2000

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-1216 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034 · Vendor Advisory
• http://secunia.com/advisories/15693 · Vendor Advisory
• http://securitytracker.com/id?1014193 · Note
• http://securityfocus.com/bid/13954 · Note
• http://kb.cert.org/vuls/id/367077 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A468 · Note