VulnerabilityModified
CVE-2006-1651
Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets.
HIGH 7.5EPSS 15.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 15.19% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/isa server
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/429816/100/0/threaded
- http://www.securityfocus.com/archive/1/429846/100/0/threaded
- http://www.securityfocus.com/archive/1/430281/100/0/threaded
- http://www.securityfocus.com/archive/1/430684/100/0/threaded
- http://www.securityfocus.com/archive/1/429816/100/0/threaded
- http://www.securityfocus.com/archive/1/429846/100/0/threaded
- http://www.securityfocus.com/archive/1/430281/100/0/threaded
- http://www.securityfocus.com/archive/1/430684/100/0/threaded
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.