Every CVE Search/ Get API key

CVE-2001-0239

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers...

7.5 HighPublic exploit

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Exploit likelihood

28.0%Down 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Record
CVE-2001-0239
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Record
CVE-2001-0239
Updated
2026-11-02
EUVDEUVD-2001-0239 No score

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Record
EUVD-2001-0239
Updated
2026-11-03
GitHub AdvisoriesGHSA-7rq7-3vr3-7mmq No score

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers...

Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

Record
GHSA-7rq7-3vr3-7mmq
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft ISA Server 2000 Web Proxy - Denial of Service2001-04-16

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0239 is a high vulnerability (CVSS 7.5) in Microsoft Isa Server, published July 2, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 28.0%, the 98th percentile. No source names a fixed version.

References

MoveEnter Open