CVE-2006-1651

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-06 · updated 2026-06-16

Description

Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets. NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol.

Affected products

Microsoft Isa Server: 2004

References

http://www.securityfocus.com/archive/1/429816/100/0/threaded
http://www.securityfocus.com/archive/1/429846/100/0/threaded
http://www.securityfocus.com/archive/1/430281/100/0/threaded
http://www.securityfocus.com/archive/1/430684/100/0/threaded
http://www.securityfocus.com/archive/1/429816/100/0/threaded
http://www.securityfocus.com/archive/1/429846/100/0/threaded
http://www.securityfocus.com/archive/1/430281/100/0/threaded
http://www.securityfocus.com/archive/1/430684/100/0/threaded

Get alerted when CVE-2006-1651 or the next vulnerability affects your stack