CVE-2004-0230

CVE-2004-0230

Medium · published August 18, 2004

Patch now

High probability of exploitation

CVSS calls it medium at 5.0. It sits in the 99.6th percentile for exploit probability.

CVSS v2.0
5.0
EPSS
80%
Percentile
99.6
In the wild
Unconfirmed
What it is

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v4.0
Not supplied
EPSS
0.80286 · 99.6th percentile
Published
2004-08-18T08:00Z
Affected products (86)
ProductVersionsFixed in
juniper/junos< 11.411.4
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
juniper/junosall versions—
microsoft/windows_2000all versions—
microsoft/windows_2000all versions—
microsoft/windows_98all versions—
microsoft/windows_98seall versions—
microsoft/windows_server_2003all versions—
microsoft/windows_server_2003all versions—
microsoft/windows_server_2003all versions—
microsoft/windows_server_2003all versions—
microsoft/windows_xpall versions—
microsoft/windows_xpall versions—
microsoft/windows_xpall versions—
microsoft/windows_xpall versions—
oracle/solarisall versions—
oracle/solarisall versions—
openpgp/openpgpall versions—
mcafee/network_data_loss_prevention≤ 8.6—
mcafee/network_data_loss_preventionall versions—
mcafee/network_data_loss_preventionall versions—
mcafee/network_data_loss_preventionall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
xinuos/openserverall versions—
xinuos/openserverall versions—
xinuos/unixwareall versions—
xinuos/unixwareall versions—
References (58)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc · [email protected]ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt · [email protected]ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt · [email protected]ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt · [email protected]ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc · [email protected]http://kb.juniper.net/JSA10638 · [email protected]http://marc.info/?l=bugtraq&m=108302060014745&w=2 · [email protected]http://marc.info/?l=bugtraq&m=108506952116653&w=2 · [email protected]http://secunia.com/advisories/11440 · [email protected]http://secunia.com/advisories/11458 · [email protected]http://secunia.com/advisories/22341 · [email protected]http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml · [email protected]http://www.kb.cert.org/vuls/id/415294 · [email protected]http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html · [email protected]http://www.osvdb.org/4030 · [email protected]http://www.securityfocus.com/archive/1/449179/100/0/threaded · [email protected]http://www.securityfocus.com/bid/10183 · [email protected]http://www.uniras.gov.uk/vuls/2004/236929/index.htm · [email protected]http://www.us-cert.gov/cas/techalerts/TA04-111A.html · [email protected]http://www.vupen.com/english/advisories/2006/3983 · [email protected]https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 · [email protected]https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/15886 · [email protected]https://kc.mcafee.com/corporate/index?page=content&id=SB10053 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711 · [email protected]ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc · af854a3a-2127-422b-91ae-364da2661108ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt · af854a3a-2127-422b-91ae-364da2661108ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt · af854a3a-2127-422b-91ae-364da2661108ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt · af854a3a-2127-422b-91ae-364da2661108ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc · af854a3a-2127-422b-91ae-364da2661108http://kb.juniper.net/JSA10638 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=108302060014745&w=2 · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=108506952116653&w=2 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/11440 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/11458 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22341 · af854a3a-2127-422b-91ae-364da2661108http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml · af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/415294 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/4030 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/449179/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/10183 · af854a3a-2127-422b-91ae-364da2661108http://www.uniras.gov.uk/vuls/2004/236929/index.htm · af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/cas/techalerts/TA04-111A.html · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3983 · af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 · af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/15886 · af854a3a-2127-422b-91ae-364da2661108https://kc.mcafee.com/corporate/index?page=content&id=SB10053 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 05 MAY 04:00Z
    TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to…
    cvelistv5