CVE-2007-4991: Infoleak
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4991?
CVE-2007-4991 is considered to have a medium severity level due to information disclosure vulnerabilities.
How do I fix CVE-2007-4991?
To fix CVE-2007-4991, you should apply the latest security updates from Microsoft for ISA Server 2004 SP1 and SP2.
What software is affected by CVE-2007-4991?
CVE-2007-4991 affects Microsoft ISA Server 2004 Service Pack 1 and Service Pack 2.
What type of attack does CVE-2007-4991 enable?
CVE-2007-4991 enables remote attackers to obtain potentially sensitive information, specifically the destination IP address of another user's session.
Is there a workaround for CVE-2007-4991?
Currently, there are no known workarounds for CVE-2007-4991 other than applying the recommended updates.