vulnwire
7.5high

CVE-2004-0892in critical feed

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Pr…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
17.4%
percentile 97%
Public exploits
0
none known

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Exploit prediction (EPSS)

17.36% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17906 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/11605 · vdb-entry, x_refsource_BID, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-039 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.