CVEvulnerability

CVE-2004-0230

5.0 MEDIUM Published 2004-08-18 Modified 2026-10-09 Official page ↗
Status
Analyzed
Published
2004-08-18
Last modified
2026-10-09
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected configurations

• juniper junos (< 11.4) • juniper junos 11.4 • juniper junos 11.4r13 • juniper junos 11.4x27 • juniper junos 12.1 • juniper junos 12.1r • juniper junos 12.1x44 • juniper junos 12.1x45 • juniper junos 12.1x46 • juniper junos 12.1x47 • juniper junos 12.2 • juniper junos 12.3 • juniper junos 13.1 • juniper junos 13.2 • juniper junos 13.3 • microsoft windows 2000 • microsoft windows 98 • microsoft windows 98se • microsoft windows server 2003 • microsoft windows xp • oracle solaris 10 • oracle solaris 11 • openpgp openpgp 2.6.2 • mcafee network data loss prevention (<= 8.6) • mcafee network data loss prevention 9.2.0 • mcafee network data loss prevention 9.2.1 • mcafee network data loss prevention 9.2.2 • netbsd netbsd 1.5 • netbsd netbsd 1.5.1 • netbsd netbsd 1.5.2 • netbsd netbsd 1.5.3 • netbsd netbsd 1.6 • netbsd netbsd 1.6.1 • netbsd netbsd 1.6.2 • netbsd netbsd 2.0 • xinuos openserver 5.0.6 • xinuos openserver 5.0.7 • xinuos unixware 7.1.1 • xinuos unixware 7.1.3

Related

Referenced by CWE · observed example (1)

  • CWE-334 Small Space of Random Values weakness

References