Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS05-034 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Cumulative Security Update for ISA Server 2000 (899753) |
CAPEC : Common Attack Pattern Enumeration & Classification
| Id | Name |
|---|---|
| CAPEC-33 | HTTP Request Smuggling |
| CAPEC-105 | HTTP Request Splitting |
| CAPEC-273 | HTTP Response Smuggling |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1145 | |||
| Oval ID: | oval:org.mitre.oval:def:1145 | ||
| Title: | ISA Server Poison Cache Vulnerability | ||
| Description: | Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2005-1215 | Version: | 4 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Security and Acceleration Server 2000 |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:468 | |||
| Oval ID: | oval:org.mitre.oval:def:468 | ||
| Title: | ISA Server NetBIOS Packet Filter Bypass Vulnerability | ||
| Description: | Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2005-1216 | Version: | 4 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Security and Acceleration Server 2000 |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 17312 | Microsoft ISA Server NetBIOS Predefined Filter Privilege Escalation Microsoft ISA Server contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the NetBIOS (all) predefined packet filter allows remote attackers to connect to services utilizing the NetBIOS protocol. This flaw may lead to a loss of confidentiality or integrity. |
| 17311 | Microsoft ISA Server Cache Poisoning Restriction Bypass |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Squid content length cache poisoning attempt RuleID : 3694 - Revision : 14 - Type : SERVER-WEBAPP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2005-06-14 | Name : A user can elevate his privileges. File : smb_nt_ms05-034.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:45:13 |
|
