Unrated severityNVD Advisory· Published Feb 23, 2007· Updated Jun 16, 2026

CVE-2006-7027

Description

Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks.

Affected products

Microsoft/Isa Server
cpe:2.3:a:microsoft:isa_server:2004:*:*:*:*:*:*:*
Microsoft/Internet Security And Acceleration Serverllm-fuzzy
Range: =2004

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/432947/30/5190/threadednvd
www.securityfocus.com/archive/1/433074/30/5190/threadednvd
www.securityfocus.com/archive/1/433141/30/5160/threadednvd
www.securityfocus.com/archive/1/433350/30/5100/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/26233nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.012
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000