Microsoft ISA Server SOCKS4 Proxy Connection Remote Information Disclosure Vulnerability

ISA Server2004 SP1とSP2に空のSOCKS4のパケットを送付することで一部の情報が見えてしまう脆弱性が存在するそうです。

Microsoft ISA Server is prone to an information-disclosure vulnerability that occurs when SOCKS4 handles empty packets. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.
This issue affects Microsoft ISA Server 2004 SP1 and SP2.

---