CVE-2001-0239

Microsoft ISA Server 2000 - Denial of Service via Long Web Request

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2001-0239. PoCs published by SecureXpert Labs.

AI-analyzed exploit summary The provided code is a writeup describing a DoS vulnerability in MS ISA Server's Web Proxy service, triggered by an unusually long HTTP path. The included C code is a utility to generate repeated characters, not an exploit itself.

Description

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Exploits (1)

exploitdb WRITEUP VERIFIED

by SecureXpert Labs · cdoswindows

https://www.exploit-db.com/exploits/20763

View Code ZIP pw:eip

The provided code is a writeup describing a DoS vulnerability in MS ISA Server's Web Proxy service, triggered by an unusually long HTTP path. The included C code is a utility to generate repeated characters, not an exploit itself.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Theoretical

Target: Microsoft ISA Server (Web Proxy service)

No auth needed

Prerequisites: Network access to the Web Proxy service · Web Publishing enabled for external exploitation

MITRE ATT&CK