CVE-2005-1907: Medium severity Microsoft ISA Server vulnerability
Published May 31, 2005
·Updated
The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
Affected Software
1 affected component
Microsoft ISA Server=2000
Event History
May 31, 2005
CVE Published
04:00 AM
Jun 8, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1907?
CVE-2005-1907 is classified as a denial of service vulnerability.
2
How does CVE-2005-1907 affect the ISA Server 2000?
CVE-2005-1907 allows remote attackers to crash the Wspsrv.exe process by sending a large volume of SecureNAT network traffic.
3
Can CVE-2005-1907 be exploited remotely?
Yes, CVE-2005-1907 can be exploited remotely without authentication.
4
What are the mitigation strategies for CVE-2005-1907?
Mitigation strategies for CVE-2005-1907 include limiting network traffic and applying patches provided by Microsoft.
5
Is there a patch available for CVE-2005-1907?
Microsoft provides security updates that address CVE-2005-1907 for affected users.