Microsoft Proxy Server vulnerabilities

5 CVEs affecting Microsoft Proxy Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0892, published 2005-01-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2000-0246, published 2000-03-30. Medium severity, CVSS 5.0. EPSS: 80% chance of exploitation in the next 30 days. IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka…
CVE-2002-0371, published 2002-07-03. High severity, CVSS 7.5. EPSS: 54.4% chance of exploitation in the next 30 days. Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that…
CVE-2003-0819, published 2004-02-17. High severity, CVSS 10.0. EPSS: 40.9% chance of exploitation in the next 30 days. Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323…
CVE-2003-0110, published 2003-05-05. Medium severity, CVSS 5.0. EPSS: 18% chance of exploitation in the next 30 days. The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Server 2000 allow remote attackers to cause a denial of service…
CVE-2004-0892, published 2005-01-27. High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days. Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted…