NVD

Id
57080  
Name
CVE-2007-4991  
Description
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user"s session) via an empty packet.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-09-21  
Modified Date
2008-11-15  
Seq
2007-4991  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291392 57080 CVE-2007-4991 25753  View
291393 57080 CVE-2007-4991 1018727  View
291394 57080 CVE-2007-4991 http://www.zerodayinitiative.com/advisories/ZDI-07-053.html  View
291395 57080 CVE-2007-4991 isa-socks-information-disclosure(36715)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55726 JVNDB-2007-004418 Microsoft Internet Security などの SOCKS4 Proxy における重要な情報 (別ユーザのセッションの宛先 IP アドレス) を取得される脆弱性 Microsoft Internet Security および Acceleration (ISA) Server 2004 SP1 and SP2 の SOCKS4 Proxy には、重要な情報 (別ユーザのセッションの宛先 IP アドレス) を取得される脆弱性が存在します。 CVE-2007-4991 28346 CVE-2007-4991 57080 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004418.html 2007-09-21 2012-09-25 View