CVE-2004-0230

TCP Connection Reset - Remote Denial of Service

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

TCP, cuando se usa un tamaño de ventana de transmisión grande, hace más fácil a atacantes remotos adivinar números de secuencia y causar una denegación de servicio (pérdida de la conexión) en conexiones TCP persistentes inyectando repetidamente un paquete TCP RST, especialmente en protocolos que usan conexiones de vida larga, como BGP.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-03-05 First Exploit
2004-03-17 CVE Reserved
2004-04-22 CVE Published
2023-03-07 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (32)

URL	Tag	Source
http://kb.juniper.net/JSA10638	Third Party Advisory
http://marc.info/?l=bugtraq&m=108302060014745&w=2	Mailing List
http://www.kb.cert.org/vuls/id/415294	Third Party Advisory
http://www.osvdb.org/4030	Broken Link
http://www.uniras.gov.uk/vuls/2004/236929/index.htm	Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-111A.html	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15886	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/291	2004-04-23
https://www.exploit-db.com/exploits/24030	2004-03-05
https://www.exploit-db.com/exploits/24031	2004-04-20
https://www.exploit-db.com/exploits/24033	2004-04-23
https://www.exploit-db.com/exploits/24032	2004-04-20
https://www.exploit-db.com/exploits/942	2005-04-17
https://www.exploit-db.com/exploits/276	2004-04-22
http://www.securityfocus.com/bid/10183	2024-08-08

URL	Date	SRC
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	2018-10-19
https://kc.mcafee.com/corporate/index?page=content&id=SB10053	2018-10-19

URL	Date	SRC
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc	2018-10-19
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt	2018-10-19
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt	2018-10-19
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt	2018-10-19
ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc	2018-10-19
http://marc.info/?l=bugtraq&m=108506952116653&w=2	2018-10-19
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml	2018-10-19
http://www.securityfocus.com/archive/1/449179/100/0/threaded	2018-10-19
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019	2018-10-19
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064	2018-10-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Solaris Search vendor "Oracle" for product "Solaris"				10 Search vendor "Oracle" for product "Solaris" and version "10"		-		Affected
Oracle Search vendor "Oracle"		Solaris Search vendor "Oracle" for product "Solaris"				11 Search vendor "Oracle" for product "Solaris" and version "11"		-		Affected
Openpgp Search vendor "Openpgp"		Openpgp Search vendor "Openpgp" for product "Openpgp"				2.6.2 Search vendor "Openpgp" for product "Openpgp" and version "2.6.2"		-		Affected
Mcafee Search vendor "Mcafee"		Network Data Loss Prevention Search vendor "Mcafee" for product "Network Data Loss Prevention"				<= 8.6 Search vendor "Mcafee" for product "Network Data Loss Prevention" and version " <= 8.6"		-		Affected
Mcafee Search vendor "Mcafee"		Network Data Loss Prevention Search vendor "Mcafee" for product "Network Data Loss Prevention"				9.2.0 Search vendor "Mcafee" for product "Network Data Loss Prevention" and version "9.2.0"		-		Affected
Mcafee Search vendor "Mcafee"		Network Data Loss Prevention Search vendor "Mcafee" for product "Network Data Loss Prevention"				9.2.1 Search vendor "Mcafee" for product "Network Data Loss Prevention" and version "9.2.1"		-		Affected
Mcafee Search vendor "Mcafee"		Network Data Loss Prevention Search vendor "Mcafee" for product "Network Data Loss Prevention"				9.2.2 Search vendor "Mcafee" for product "Network Data Loss Prevention" and version "9.2.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5 Search vendor "Netbsd" for product "Netbsd" and version "1.5"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5.1 Search vendor "Netbsd" for product "Netbsd" and version "1.5.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5.2 Search vendor "Netbsd" for product "Netbsd" and version "1.5.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5.3 Search vendor "Netbsd" for product "Netbsd" and version "1.5.3"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.6 Search vendor "Netbsd" for product "Netbsd" and version "1.6"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.6.1 Search vendor "Netbsd" for product "Netbsd" and version "1.6.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.6.2 Search vendor "Netbsd" for product "Netbsd" and version "1.6.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				2.0 Search vendor "Netbsd" for product "Netbsd" and version "2.0"		-		Affected
Xinuos Search vendor "Xinuos"		Openserver Search vendor "Xinuos" for product "Openserver"				5.0.6 Search vendor "Xinuos" for product "Openserver" and version "5.0.6"		-		Affected
Xinuos Search vendor "Xinuos"		Openserver Search vendor "Xinuos" for product "Openserver"				5.0.7 Search vendor "Xinuos" for product "Openserver" and version "5.0.7"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				*		-		Affected
Xinuos Search vendor "Xinuos"		Unixware Search vendor "Xinuos" for product "Unixware"				7.1.1 Search vendor "Xinuos" for product "Unixware" and version "7.1.1"		-		Affected
Xinuos Search vendor "Xinuos"		Unixware Search vendor "Xinuos" for product "Unixware"				7.1.3 Search vendor "Xinuos" for product "Unixware" and version "7.1.3"		-		Affected