CVE-2006-7027
First published: Fri Feb 23 2007(Updated: )
Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Security and Acceleration Server | =2004 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26233
- http://www.securityfocus.com/archive/1/433350/30/5100/threaded
- http://www.securityfocus.com/archive/1/433141/30/5160/threaded
- http://www.securityfocus.com/archive/1/433074/30/5190/threaded
- http://www.securityfocus.com/archive/1/432947/30/5190/threaded
Frequently Asked Questions
What is the severity of CVE-2006-7027?
CVE-2006-7027 is classified as a medium-severity vulnerability.
How do I fix CVE-2006-7027?
To mitigate CVE-2006-7027, apply the latest security updates for Microsoft ISA Server 2004.
What are the potential impacts of CVE-2006-7027?
CVE-2006-7027 could allow attackers to manipulate log files which may facilitate further attacks.
What software is affected by CVE-2006-7027?
CVE-2006-7027 affects Microsoft ISA Server 2004.
Can CVE-2006-7027 lead to more serious vulnerabilities?
Yes, by manipulating log files, CVE-2006-7027 may enable attackers to conduct additional attacks.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft internet security and acceleration server
- version/microsoft internet security and acceleration server/2004