CVE-2004-0892

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003…

High7.5EPSS 17.4%

Published: 16 Nov 2004
Updated: 8 Aug 2024
Reserved: 22 Sept 2004
Assigned by: mitre

Description

Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

Timeline

2004
22 Sept 2004
22 Sept 2004
ID reserved
By mitre
16 Nov 200455 days later
16 Nov 2004· 55 days later
Published
2024
8 Aug 202420 years later
8 Aug 2024· 20 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2004-0892, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	High7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (exploitation in 30 days): 17.4% · top 2.9% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

n/a
- affected n/a

References (5)

oval:org.mitre.oval:def:4264 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
oval:org.mitre.oval:def:4859 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
isa-cache-reverse-spoof(17906) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
11605 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
MS04-039 (opens in a new tab)vendor-advisoryx_refsource_MSx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2004-0892](https://cveledger.app/badge/CVE-2004-0892.svg)](https://cveledger.app/cve/CVE-2004-0892)

Record last updated 8 Aug 2024, 00:31 UTC.