CVE-2006-1651: High severity microsoft isa server vulnerability

Published Apr 6, 2006

Updated

DISPUTED Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol."

Affected Software

1 affected component

Microsoft ISA Server=2004

Event History

Apr 6, 2006

CVE Published

10:04 AM

Disputed

10:04 AM

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1651?

The severity of CVE-2006-1651 is disputed as some claim that ISA Server 2004 does not support IPv6.

How do I fix CVE-2006-1651?

To mitigate CVE-2006-1651, ensure that appropriate filtering and firewall rules are configured, considering IPv6 support.

What software is affected by CVE-2006-1651?

CVE-2006-1651 affects Microsoft ISA Server 2004.

Can CVE-2006-1651 be exploited remotely?

Yes, CVE-2006-1651 allows remote attackers to potentially bypass filtering rules.

Is there a patch available for CVE-2006-1651?

There is no specific patch for CVE-2006-1651 since it is disputed, but regular updates and correct configurations are recommended.