// For flags

CVE-2004-0790

Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

4
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Several potential security vulnerabilities have been identified in the HP Tru64 UNIX TCP/IP including ICMP, and Initial Sequence Number generation (ISNs). These exploits could result in a remote Denial of Service (DoS) from network throughput reduction for TCP connections, the reset of TCP connections, or TCP spoofing.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-08-17 CVE Reserved
  • 2005-04-12 CVE Published
  • 2005-04-17 First Exploit
  • 2024-08-08 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (31)
URL Tag Source
http://secunia.com/advisories/18317 Third Party Advisory
http://secunia.com/advisories/22341 Third Party Advisory
http://securityreason.com/securityalert/19 Third Party Advisory
http://securityreason.com/securityalert/57 Third Party Advisory
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html X_refsource_misc
http://www.securityfocus.com/bid/13124 Vdb Entry
http://www.vupen.com/english/advisories/2006/3983 Vdb Entry
http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt X_refsource_misc
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1177 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A176 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1910 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A211 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3458 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A412 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4804 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A514 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A53 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A622 Signature
URL Date SRC
https://packetstorm.news/files/id/37801 2005-06-01
https://www.exploit-db.com/exploits/948 2005-04-20
https://www.exploit-db.com/exploits/942 2005-04-17
https://www.exploit-db.com/exploits/25389 2013-05-21
URL Date SRC
URL Date SRC
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt 2018-10-30
http://marc.info/?l=bugtraq&m=112861397904255&w=2 2018-10-30
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101658-1 2018-10-30
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57746-1 2018-10-30
http://www.securityfocus.com/archive/1/418882/100/0/threaded 2018-10-30
http://www.securityfocus.com/archive/1/449179/100/0/threaded 2018-10-30
http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en 2018-10-30
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 2018-10-30
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 2018-10-30
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
 Windows 2000
Search vendor "Microsoft" for product "Windows 2000"
*sp3
Affected
Microsoft
Search vendor "Microsoft"
 Windows 2000
Search vendor "Microsoft" for product "Windows 2000"
*sp4, fr
Affected
Microsoft
Search vendor "Microsoft"
 Windows 2003 Server
Search vendor "Microsoft" for product "Windows 2003 Server"
 r2
Search vendor "Microsoft" for product "Windows 2003 Server" and version "r2"
-
Affected
Microsoft
Search vendor "Microsoft"
 Windows 98
Search vendor "Microsoft" for product "Windows 98"
*gold
Affected
Microsoft
Search vendor "Microsoft"
 Windows 98se
Search vendor "Microsoft" for product "Windows 98se"
*-
Affected
Microsoft
Search vendor "Microsoft"
 Windows Me
Search vendor "Microsoft" for product "Windows Me"
*-
Affected
Microsoft
Search vendor "Microsoft"
 Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*64-bit
Affected
Microsoft
Search vendor "Microsoft"
 Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*sp1, 64-bit
Affected
Microsoft
Search vendor "Microsoft"
 Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*sp1, tablet_pc
Affected
Microsoft
Search vendor "Microsoft"
 Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*sp2, tablet_pc
Affected
Sun
Search vendor "Sun"
 Solaris
Search vendor "Sun" for product "Solaris"
 9.0
Search vendor "Sun" for product "Solaris" and version "9.0"
sparc
Affected
Sun
Search vendor "Sun"
 Solaris
Search vendor "Sun" for product "Solaris"
 10.0
Search vendor "Sun" for product "Solaris" and version "10.0"
sparc
Affected
Sun
Search vendor "Sun"
 Sunos
Search vendor "Sun" for product "Sunos"
 5.7
Search vendor "Sun" for product "Sunos" and version "5.7"
-
Affected
Sun
Search vendor "Sun"
 Sunos
Search vendor "Sun" for product "Sunos"
 5.8
Search vendor "Sun" for product "Sunos" and version "5.8"
-
Affected