CVE-2004-0892

Microsoft Proxy Server 2.0-ISA Server 2000 - Info Disclosure

Title source: llm
STIX 2.1

Description

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17906
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11605

Scores

EPSS 0.1736
EPSS Percentile 96.8%

Details

Status published
Products (4)
microsoft/isa_server 2000 (3 CPE variants)
microsoft/proxy_server 2.0 (2 CPE variants)
microsoft/windows_2003_server 2000
microsoft/windows_2003_server 2003
Published Jan 27, 2005
Tracked Since Feb 18, 2026