CVE-2005-1215
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content...
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
Exploit likelihood
What each source reports
NVD Score used
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
CVE-2005-1215- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
CVE-2005-1215- Updated
- 2026-11-02
EUVDEUVD-2005-1218 No score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
EUVD-2005-1218- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vw42-gf4c-r74v No score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content...
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
GHSA-vw42-gf4c-r74v- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1215 is a high vulnerability (CVSS 7.5) in Microsoft Isa Server, published June 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.0%, the 97th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1145
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034
securityfocus.com/bid/13956
securitytracker.com/id?1014193
secunia.com/advisories/15693
nvd.nist.gov/vuln/detail/CVE-2005-1215
github.com/advisories/GHSA-vw42-gf4c-r74v