CVE-2004-0892

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Published: Jan 27, 2005
Updated: Apr 13, 2023
CVE: CVE-2004-0892
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / isa_server	2000-sp1	2000-sp1.x
microsoft / proxy_server	2.0	2.0.x
microsoft / isa_server	2000	2000.x
microsoft / proxy_server	2.0-sp1	2.0-sp1.x
microsoft / isa_server	2000-sp2	2000-sp2.x
microsoft / windows_2003_server	2003	2003.x
microsoft / windows_2003_server	2000	2000.x

http://www.securityfocus.com/bid/11605
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039
https://exchange.xforce.ibmcloud.com/vulnerabilities/17906
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4859

Vulnerability Database

289,599

CVE-2004-0892