CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 82.8%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 82.76% probability · 100th percentile
- CISA KEV
- Not listed
- Affected
- cisco/agent desktop · cisco/e-mail manager · cisco/emergency responder · cisco/intelligent contact manager · cisco/interactive voice response · cisco/ip contact center enterprise · cisco/ip contact center express · cisco/meetingplace · cisco/personal assistant · cisco/remote monitoring suite option · cisco/secure access control server · cisco/support tools · cisco/web collaboration option · hitachi/alaxala · cisco/call manager · cisco/unity server · cisco/mgx 8230 · cisco/mgx 8250 · cisco/ciscoworks access control list manager · cisco/ciscoworks common management foundation · +40 more
- Source
- cret@cert.org
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt
- http://secunia.com/advisories/15393
- http://secunia.com/advisories/15417/Patch
- http://secunia.com/advisories/18222
- http://secunia.com/advisories/18662
- http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
- http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/637934Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13676Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20635
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt
- http://secunia.com/advisories/15393
- http://secunia.com/advisories/15417/Patch
- http://secunia.com/advisories/18222
- http://secunia.com/advisories/18662
- http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
- http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/637934Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13676Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20635
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.