CVE-2004-0230

Опубликовано: 18 авг. 2004

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Комментарий

CWE-331: Insufficient Entropy

Ссылки

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc
Third Party Advisory
Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt
Third Party Advisory
Broken Link
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt
Third Party Advisory
Broken Link
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt
Third Party Advisory
Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc
Third Party Advisory
Broken Link
http://kb.juniper.net/JSA10638
Third Party Advisory
http://marc.info/?l=bugtraq&m=108302060014745&w=2
Mailing List
http://marc.info/?l=bugtraq&m=108506952116653&w=2
Mailing List
http://secunia.com/advisories/11440
Permissions Required
Third Party Advisory
VDB Entry
Broken Link
http://secunia.com/advisories/11458
Permissions Required
Third Party Advisory
VDB Entry
Broken Link
http://secunia.com/advisories/22341
Permissions Required
Third Party Advisory
VDB Entry
Broken Link
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
Broken Link
http://www.kb.cert.org/vuls/id/415294
Third Party Advisory
US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
Patch
Third Party Advisory
http://www.osvdb.org/4030
Broken Link
http://www.securityfocus.com/archive/1/449179/100/0/threaded
Broken Link
http://www.securityfocus.com/archive/1/449179/100/0/threaded
Broken Link
http://www.securityfocus.com/bid/10183
Exploit
Third Party Advisory
VDB Entry
http://www.uniras.gov.uk/vuls/2004/236929/index.htm
Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-111A.html
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*

Версия до 11.4 (исключая)

cpe:2.3:o:juniper:junos:11.4:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4r13:s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:11.4x27:*:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r4:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r5:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r6:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.2:r7:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.1:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.1:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.1:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.1:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_2000:-:sp3:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:itanium:*

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:-:*

cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*

cpe:2.3:o:microsoft:windows_xp:-:*:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:itanium:*

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:openpgp:openpgp:2.6.2:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*

Версия до 8.6 (включая)

cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.2:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*

cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:o:xinuos:openserver:5.0.6:*:*:*:*:*:*:*

cpe:2.3:o:xinuos:openserver:5.0.7:*:*:*:*:*:*:*

Конфигурация 8

Одно из

cpe:2.3:o:xinuos:unixware:7.1.1:*:*:*:*:*:*:*

cpe:2.3:o:xinuos:unixware:7.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.12219

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0230

ubuntu

почти 21 год назад

CVE-2004-0230

debian

почти 21 год назад

TCP, when using a large Window Size, makes it easier for remote attack ...

GHSA-58p6-7f25-xqv3

github

около 3 лет назад

BDU:2014-00219

CVSS3: 5.3

fstec

около 11 лет назад

Уязвимость встроенного программного обеспечения станков с числовым программным управлением FANUC 32i, позволяющая нарушителю вызвать отказ в обслуживании

SUSE-SU-2017:0437-1

suse-cvrf

больше 8 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 93%

0.12219

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other