CVE-2009-0077
MEDIUM
5.0
CVSS Severity Score
Vulnerability Description
The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka "Web Proxy TCP State Limited Denial of Service Vulnerability."
Affected Platforms (CPE)
📦
Microsoft
Forefront Threat Management Gateway
All versions📦
Microsoft
Internet Security And Acceleration Server
= 2004📦
Microsoft
Internet Security And Acceleration Server
= 2004📦
Microsoft
Internet Security And Acceleration Server
= 2006📦
Microsoft