CVE-2007-4991: Infoleak
First published: Fri Sep 21 2007(Updated: )
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Security and Acceleration Server | =2004-sp1 | |
| Microsoft Internet Security and Acceleration Server | =2004-sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2007-4991?
CVE-2007-4991 is considered to have a medium severity level due to information disclosure vulnerabilities.
How do I fix CVE-2007-4991?
To fix CVE-2007-4991, you should apply the latest security updates from Microsoft for ISA Server 2004 SP1 and SP2.
What software is affected by CVE-2007-4991?
CVE-2007-4991 affects Microsoft ISA Server 2004 Service Pack 1 and Service Pack 2.
What type of attack does CVE-2007-4991 enable?
CVE-2007-4991 enables remote attackers to obtain potentially sensitive information, specifically the destination IP address of another user's session.
Is there a workaround for CVE-2007-4991?
Currently, there are no known workarounds for CVE-2007-4991 other than applying the recommended updates.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/event
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- vendor/microsoft
- canonical/microsoft internet security and acceleration server
- version/microsoft internet security and acceleration server/2004-sp1
- version/microsoft internet security and acceleration server/2004-sp2