CVE-2001-1533

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-07-14 · updated 2026-06-16

Description

Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability. Therefore this "laws of physics" issue might not be included in CVE

Affected products

Microsoft Isa Server: 2000

References

http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html
http://www.iss.net/security_center/static/7446.php
http://www.securityfocus.com/bid/3501
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html
http://www.iss.net/security_center/static/7446.php
http://www.securityfocus.com/bid/3501

Get alerted when CVE-2001-1533 or the next vulnerability affects your stack