Info from SANS about potential ISA issue

  • From: "Art DeKneef" <artdekneef@xxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 8 Nov 2001 17:05:01 -0700

*** {01.45.017} Win - MS ISA server fragmented UDP DoS

An advisory was released indicating that Microsoft ISA server is
vulnerable to a denial of service attack whereby a remote attacker sends
many fragmented UDP packets, which causes abnormally high CPU
utilization.

This vulnerability has not been confirmed.

Source: VulnWatch
<http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0032.html>
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0032.html

Other related posts: