CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Microsoft. Its EPSS score suggests a 78.5% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2009-0077
Severity
MEDIUM
CVSS
5
EPSS
78.50%
Microsoft
Original NVD Description
The firewall engine in Microsoft Forefront Threat Management Gateway, Medium Business Edition (TMG MBE); and Internet Security and Acceleration (ISA) Server 2004 SP3, 2006, 2006 Supportability Update, and 2006 SP1; does not properly manage the session state of web listeners, which allows remote attackers to cause a denial of service (many stale sessions) via crafted packets, aka "Web Proxy TCP State Limited Denial of Service Vulnerability."