PT-2006-2646 · Microsoft · Isa Server 2004+1

Published 2006-04-06 · Updated 2024-08-07 · CVE-2006-1651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft ISA Server 2004

Description: The issue allows remote attackers to bypass certain filtering rules, including ones for ICMP and TCP, via IPv6 packets. However, an established researcher has disputed this, stating that neither Microsoft ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering, as it is a different network protocol.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-1651

Affected Products

Isa Server 2004

Windows 2003 Basic Firewall

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-1651 · Security Note
• http://securityfocus.com/archive/1/430281/100/0/threaded · Note
• http://securityfocus.com/archive/1/430684/100/0/threaded · Note
• http://securityfocus.com/archive/1/429816/100/0/threaded · Note
• https://t.me/cvenotify/89768 · Telegram Post
• http://securityfocus.com/archive/1/429846/100/0/threaded · Note