CVE-2005-1215
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content...
CVE-2005-1215 is a high vulnerability (CVSS 7.5) in Microsoft Isa Server, published June 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.0%, the 97th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 19.0%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
CVE-2005-1215- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
CVE-2005-1215- Updated
- 2026-11-02
EUVDEUVD-2005-1218No score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
EUVD-2005-1218- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vw42-gf4c-r74vNo score
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content...
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers.
- Record
GHSA-vw42-gf4c-r74v- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1145
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-034
securityfocus.com/bid/13956
securitytracker.com/id?1014193
secunia.com/advisories/15693
nvd.nist.gov/vuln/detail/CVE-2005-1215
github.com/advisories/GHSA-vw42-gf4c-r74v