CVE-2004-0892
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business...
CVE-2004-0892 is a high vulnerability (CVSS 7.5) in Microsoft Isa Server, published November 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 17.4%, the 97th percentile. No source names a fixed version.
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
- Record
CVE-2004-0892- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
- Record
CVE-2004-0892- Updated
- 2026-11-02
EUVDEUVD-2004-0890 No score
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
- Record
EUVD-2004-0890- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vpvg-m84j-rpxx No score
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business...
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
- Record
GHSA-vpvg-m84j-rpxx- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4264
exchange.xforce.ibmcloud.com/vulnerabilities/17906
securityfocus.com/bid/11605
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039
nvd.nist.gov/vuln/detail/CVE-2004-0892
github.com/advisories/GHSA-vpvg-m84j-rpxx