// For flags

CVE-2004-0791

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Several potential security vulnerabilities have been identified in the HP Tru64 UNIX TCP/IP including ICMP, and Initial Sequence Number generation (ISNs). These exploits could result in a remote Denial of Service (DoS) from network throughput reduction for TCP connections, the reset of TCP connections, or TCP spoofing.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-08-17 CVE Reserved
  • 2005-04-12 CVE Published
  • 2005-06-01 First Exploit
  • 2024-08-08 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (28)
URL Tag Source
http://secunia.com/advisories/18317 Third Party Advisory
http://securityreason.com/securityalert/19 Third Party Advisory
http://securityreason.com/securityalert/57 Third Party Advisory
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html X_refsource_misc
http://www.securityfocus.com/bid/13124 Vdb Entry
http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt X_refsource_misc
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10228 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1112 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A184 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A464 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A596 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A688 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A726 Signature
URL Date SRC
https://packetstorm.news/files/id/37801 2005-06-01
https://www.exploit-db.com/exploits/25387 2013-05-21
URL Date SRC
URL Date SRC
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt 2018-10-30
http://marc.info/?l=bugtraq&m=112861397904255&w=2 2018-10-30
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101658-1 2018-10-30
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57746-1 2018-10-30
http://www.redhat.com/support/errata/RHSA-2005-016.html 2018-10-30
http://www.redhat.com/support/errata/RHSA-2005-017.html 2018-10-30
http://www.redhat.com/support/errata/RHSA-2005-043.html 2018-10-30
http://www.securityfocus.com/archive/1/418882/100/0/threaded 2018-10-30
http://www.securityfocus.com/archive/1/428028/100/0/threaded 2018-10-30
http://www.securityfocus.com/archive/1/428058/100/0/threaded 2018-10-30
http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en 2018-10-30
https://access.redhat.com/security/cve/CVE-2004-0791 2005-01-18
https://bugzilla.redhat.com/show_bug.cgi?id=1617291 2005-01-18
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sun
Search vendor "Sun"
 Solaris
Search vendor "Sun" for product "Solaris"
 9.0
Search vendor "Sun" for product "Solaris" and version "9.0"
sparc
Affected
Sun
Search vendor "Sun"
 Solaris
Search vendor "Sun" for product "Solaris"
 10.0
Search vendor "Sun" for product "Solaris" and version "10.0"
sparc
Affected
Sun
Search vendor "Sun"
 Sunos
Search vendor "Sun" for product "Sunos"
 5.7
Search vendor "Sun" for product "Sunos" and version "5.7"
-
Affected
Sun
Search vendor "Sun"
 Sunos
Search vendor "Sun" for product "Sunos"
 5.8
Search vendor "Sun" for product "Sunos" and version "5.8"
-
Affected