medium5.0Public exploit code

CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

HP-UX 11 / Linux Kernel 2.4 / Windows 2000/NT 4.0 / IRIX 6.5 - Small TCP MSS Denial of Service2001-07-07 · dos · multiple · Verified

Impact

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Affected products

Vendor	Product	Affected versions
Freebsd	Freebsd	Version 4.3
Hp	Hp-Ux	Versions 11.00, 11.0.4, 11.11
Hp	Vvos	Version 11.04
Linux	Linux Kernel	Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5
Microsoft	Windows 2000	All versions
Microsoft	Windows Nt	Version 4.0
Netbsd	Netbsd	Versions 1.5, 1.5.1
Openbsd	Openbsd	Versions 2.8, 2.9
Sun	Sunos	Versions 5.5.1, 5.7, 5.8

Public exploit code

Impact

Affected products

References