CVE-2007-4991 | BDVDB-2026-26445 Detail

Description#

The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/25753
http://www.securitytracker.com/id?1018727
http://www.zerodayinitiative.com/advisories/ZDI-07-053.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/36715
http://osvdb.org/45906

Exploit#

No public exploit known

History#

Version 12007-09-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.