medium5.0Public exploit code

CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denia…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

TCP TIMESTAMPS - Denial of Service2005-05-21 · dos · multiple · Verified

Impact

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Affected products

Vendor	Product	Affected versions
Cisco	Agent Desktop	All versions
Cisco	E-Mail Manager	All versions
Cisco	Emergency Responder	Version 1.1
Cisco	Intelligent Contact Manager	Version 5.0
Cisco	Interactive Voice Response	All versions
Cisco	Ip Contact Center Enterprise	All versions
Cisco	Ip Contact Center Express	All versions
Cisco	Meetingplace	All versions
Cisco	Personal Assistant	Versions 1.3\(1\), 1.3\(2\), 1.3\(3\), 1.3\(4\), 1.4\(1\), 1.4\(2\)
Cisco	Remote Monitoring Suite Option	All versions
Cisco	Secure Access Control Server	Versions 2.0, 2.1, 2.3, 2.3.5.1, 2.3.6.1, 2.4
Cisco	Support Tools	All versions

Public exploit code

Impact

Affected products

References