CVE-2001-1533
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jul 14, 2005
- Updated
- Jan 16, 2025
- Reserved
- Jul 14, 2005
Description
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3501vdb-entry
- isa-udp-flood-dos(7446)vdb-entry
- 20051101 RE: Microsoft ISA Server Fragmented Udp Flood Vulnerabilitymailing-list
- 20011102 Microsoft ISA Server Fragmented Udp Flood Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.