CVE-2001-0239: microsoft isa_server

EPSS trend

Probability

27.96%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 27.96% on 20-09-2026

20-09-202620-10-2026

EPSS score

27.96%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

Show all 4 exploits

exploit-databasedoswindowsVerified
Microsoft ISA Server 2000 Web Proxy - Denial of Service
Maturity: poc

References

7 links

www.securityfocus.com/archive/1/176912Mailing ListX Refsource BUGTRAQExploitVendor Advisory
www.securityfocus.com/archive/1/177160Mailing ListX Refsource BUGTRAQVendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021Vendor AdvisoryX Refsource MS
www.securityfocus.com/archive/1/179986Mailing ListX Refsource BUGTRAQExploitVendor Advisory
www.securityfocus.com/bid/2600VDB EntryX Refsource BIDExploitPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/6383VDB EntryX Refsource XF
www.ciac.org/ciac/bulletins/l-073.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC

Related vulnerabilities

CVE-2003-0110microsoftisa_server+117.97%23y ago15-04-2003 04:00The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service (CPU consumption or packet storm) via a spoofed, malformed packet to UDP port 1745.CVE-2003-0011microsoftisa_server13.33%23y ago21-03-2003 05:00Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.CVE-2003-0526microsoftisa_server22.47%23y ago17-07-2003 04:00Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error pages (1) 500.htm for "500 Internal Server error" or (2) 404.htm for "404 Not Found."CVE-2007-4991microsoftisa_server16.15%19y ago21-09-2007 18:00The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.CVE-2001-1533microsoftisa_server18.01%21y ago14-07-2005 04:00Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE CVE-2001-0546microsoftisa_server17.34%24y ago09-03-2002 05:00Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.

All vulnerabilities inisa_server

CVE-2001-0239: microsoft isa_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References