{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-09-20T00:00:00", "descriptions": [{"lang": "en", "value": "The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "25753", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25753"}, {"name": "1018727", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018727"}, {"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-053.html"}, {"name": "isa-socks-information-disclosure(36715)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36715"}, {"name": "45906", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/45906"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4991", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "25753", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25753"}, {"name": "1018727", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018727"}, {"name": "http://www.zerodayinitiative.com/advisories/ZDI-07-053.html", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-053.html"}, {"name": "isa-socks-information-disclosure(36715)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36715"}, {"name": "45906", "refsource": "OSVDB", "url": "http://osvdb.org/45906"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4991", "datePublished": "2007-09-21T18:00:00", "dateReserved": "2007-09-20T00:00:00", "dateUpdated": "2017-07-28T12:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:isa_server:2004:sp1:*:*:*:*:*:*", "matchCriteriaId": "BE038462-701E-4BEC-94AB-47B3BF70004B", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:isa_server:2004:sp2:*:*:*:*:*:*", "matchCriteriaId": "B2620B2B-3B42-40C3-B3A2-293EB455841D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet."}, {"lang": "es", "value": "El proxy SOCKS4 de Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 y SP2 permite a atacantes remotos obtener informaci\u00f3n potencialmente confidencial (la direcci\u00f3n IP destino de la sesi\u00f3n de otro usuario) mediante un paquete vac\u00edo."}], "id": "CVE-2007-4991", "lastModified": "2017-07-29T01:33:19.863", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-09-21T19:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/45906"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/25753"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018727"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-053.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36715"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}