Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

ISA Server 2000 can crash from crafted H.323 traffic

CVE-2001-0546 · published 25 years ago
Summary

Microsoft ISA Server 2000’s H.323 Gatekeeper service can run out of memory when it receives specially formed H.323 data. This can cause the server to stop responding, affecting any users or services that rely on it. Apply the latest Microsoft update or disable the H.323 Gatekeeper feature to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft isa_server 2000
cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*
Original advisory text
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amou...
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
17% chance of attack within 30 days
Timeline
Published20 Sep 2001
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2001-0546 · NVD
Track software like this
Free during beta