CVEvulnerability
CVE-2005-0356
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Affected configurations
• cisco agent desktop
• cisco e-mail manager
• cisco emergency responder 1.1
• cisco intelligent contact manager 5.0
• cisco interactive voice response
• cisco ip contact center enterprise
• cisco ip contact center express
• cisco meetingplace
• cisco personal assistant 1.3\(1\)
• cisco personal assistant 1.3\(2\)
• cisco personal assistant 1.3\(3\)
• cisco personal assistant 1.3\(4\)
• cisco personal assistant 1.4\(1\)
• cisco personal assistant 1.4\(2\)
• cisco remote monitoring suite option
• cisco secure access control server 2.0
• cisco secure access control server 2.1
• cisco secure access control server 2.3
• cisco secure access control server 2.3.5.1
• cisco secure access control server 2.3.6.1
• cisco secure access control server 2.4
• cisco secure access control server 2.5
• cisco secure access control server 2.6
• cisco secure access control server 2.6.2
• cisco secure access control server 2.6.3
• cisco secure access control server 2.6.4
• cisco secure access control server 2.42
• cisco secure access control server 3.0
• cisco secure access control server 3.0.1
• cisco secure access control server 3.0.3
• cisco secure access control server 3.1
• cisco secure access control server 3.1.1
• cisco secure access control server 3.2
• cisco secure access control server 3.2\(1\)
• cisco secure access control server 3.2\(1.20\)
• cisco secure access control server 3.2\(2\)
• cisco secure access control server 3.2\(3\)
• cisco secure access control server 3.2.1
• cisco secure access control server 3.2.2
• cisco secure access control server 3.3
• cisco secure access control server 3.3\(1\)
• cisco secure access control server 3.3.1
• cisco secure access control server 3.3.2
• cisco support tools
• cisco web collaboration option
• hitachi alaxala ax
• cisco call manager 1.0
• cisco call manager 2.0
• cisco call manager 3.0
• cisco call manager 3.1
• cisco call manager 3.1\(2\)
• cisco call manager 3.1\(3a\)
• cisco call manager 3.2
• cisco call manager 3.3
• cisco call manager 3.3\(3\)
• cisco call manager 4.0
• cisco unity server 2.0
• cisco unity server 2.1
• cisco unity server 2.2
• cisco unity server 2.3
… and 169 more
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc ftp.freebsd.org
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt ftp.sco.com
- http://secunia.com/advisories/15393 secunia.com
- http://secunia.com/advisories/15417/ Patch
- http://secunia.com/advisories/18222 secunia.com
- http://secunia.com/advisories/18662 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm support.avaya.com
- http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/637934 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13676 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20635 exchange.xforce.ibmcloud.com
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc ftp.freebsd.org
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt ftp.sco.com
- http://secunia.com/advisories/15393 secunia.com
- http://secunia.com/advisories/15417/ Patch
- http://secunia.com/advisories/18222 secunia.com
- http://secunia.com/advisories/18662 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm support.avaya.com
- http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/637934 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/13676 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20635 exchange.xforce.ibmcloud.com