Medium severity · published Dec 31, 2001
CVE-2001-1533
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets
5.3
CVSS
18%
EPSS
No
On KEV
Description
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)18.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Isa Server · Microsoft
2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1533
cert.uni-stuttgart.de
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html
cert.uni-stuttgart.de
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html
www.iss.net
http://www.iss.net/security_center/static/7446.php
www.securityfocus.com
http://www.securityfocus.com/bid/3501
More from Isa Server
–
CVE-2009-1534
Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and…
–
CVE-2009-0562
The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1…
–
CVE-2009-1136
The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office…
–
CVE-2009-1135
Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers…
–
CVE-2007-4991
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination…