NetSight
IP …
medium5.0Public exploit code

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persiste…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected products

VendorProductAffected versions
JuniperJunos
before 11.4
Versions 11.4, 11.4r13, 11.4x27, 12.1, 12.1r
MicrosoftWindows 2000
All versions
MicrosoftWindows 98
All versions
MicrosoftWindows 98se
All versions
MicrosoftWindows Server 2003
All versions
MicrosoftWindows Xp
All versions
OracleSolaris
Versions 10, 11
OpenpgpOpenpgp
Version 2.6.2
McafeeNetwork Data Loss Prevention
through 8.6
Versions 9.2.0, 9.2.1, 9.2.2
NetbsdNetbsd
Versions 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1
XinuosOpenserver
Versions 5.0.6, 5.0.7
XinuosUnixware
Versions 7.1.1, 7.1.3

References