Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0230
HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0230

2004-08-1804:00:00
[email protected]
web.nvd.nist.gov
677
tcp
window size
remote attackers
sequence numbers
denial of service
tcp rst packet
bgp
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected configurations

NVD
Node
oraclesolarisMatch10
OR
oraclesolarisMatch11
Node
openpgpopenpgpMatch2.6.2
Node
mcafeenetwork_data_loss_preventionRange≤8.6
OR
mcafeenetwork_data_loss_preventionMatch9.2.0
OR
mcafeenetwork_data_loss_preventionMatch9.2.1
OR
mcafeenetwork_data_loss_preventionMatch9.2.2
Node
netbsdnetbsdMatch1.5
OR
netbsdnetbsdMatch1.5.1
OR
netbsdnetbsdMatch1.5.2
OR
netbsdnetbsdMatch1.5.3
OR
netbsdnetbsdMatch1.6
OR
netbsdnetbsdMatch1.6.1
OR
netbsdnetbsdMatch1.6.2
OR
netbsdnetbsdMatch2.0
Node
xinuosopenserverMatch5.0.6
OR
xinuosopenserverMatch5.0.7
Node
juniperjunos
Node
xinuosunixwareMatch7.1.1
OR
xinuosunixwareMatch7.1.3

References

Related

nessus 14
openvas 8
debiancve 1
cisco 2
securityvulns 8
f5 2
cert 1
fortinet 1
checkpoint_advisories 2
freebsd_advisory 1
symantec 1
packetstorm 2
redhatcve 1
cvelist 3
nvd 3
threatpost 1
freebsd 2
ubuntucve 1
checkpoint_security 1
cve 2
prion 2
suse 4
oracle 1
avleonov 1
nessus
nessus
TCP Vulnerabilities in Multiple IOS-Based Cisco Products
2012-01-10 00:00:00
Juniper Junos TCP Packet Processing Remote DoS (JSA10638)
2014-07-15 00:00:00
FreeBSD : FreeBSD -- Denial of Service in TCP packet processing (729c4a9f-6007-11e6-a6c3-14dae9d210b8)
2016-08-12 00:00:00
openvas
openvas
TCP Sequence Number Approximation Reset Denial of Service Vulnerability
2012-03-01 00:00:00
TCP Sequence Number Approximation Reset Denial of Service Vulnerability
2012-03-01 00:00:00
Juniper Networks Junos OS TCP Packet Processing Denial of Service Vulnerability
2014-07-31 00:00:00
debiancve
debiancve
CVE-2004-0230
2004-08-18 04:00:00
cisco
cisco
TCP Vulnerabilities in Multiple IOS-Based Cisco Products
2004-04-20 21:00:00
TCP Vulnerabilities in Multiple Non-IOS Cisco Products
2004-04-20 21:00:00
securityvulns
securityvulns
[security bulletin] SSRT4696 rev. 0 HP ProCurve Routing Switches TCP Denial of Service (DoS)
2004-05-21 00:00:00
FreeBSD tcp DoS
2014-09-21 00:00:00
[Security Bulletin] SSRT4696 rev.0 - HP Tru64 UNIX TCP Stack Remote Denial of Service (DoS)
2004-12-24 00:00:00
f5
f5
SOL3126 - Large TCP window sizes may make it easier to predict sequence numbers vulnerability CVE-2004-0230
2007-05-16 00:00:00
K3126 : Large TCP window sizes may make it easier to predict sequence numbers vulnerability CVE-2004-0230
2014-04-04 00:00:00
cert
cert
The Border Gateway Protocol relies on persistent TCP sessions without specifying authentication requirements
2004-04-20 00:00:00
fortinet
fortinet
Protect
2020-05-20 00:00:00
checkpoint_advisories
checkpoint_advisories
Spoofed Reset (CVE-2004-0230)
2019-06-23 00:00:00
Non-MD5 Authenticated BGP Connections (CAN-2004-0230; CAN-2004-0589)
2004-02-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:19.tcp
2014-09-16 00:00:00
symantec
symantec
Multiple Vendor TCP Sequence Number Approximation Vulnerability
2004-04-20 00:00:00
packetstorm
packetstorm
disconn.py
2004-04-28 00:00:00
Kreset.pl
2004-04-25 00:00:00
redhatcve
redhatcve
CVE-2004-0230
2015-10-30 10:25:57
cvelist
cvelist
CVE-2004-0230
2004-05-05 04:00:00
CVE-2014-6575
2015-01-21 15:00:00
CVE-2007-0442
2007-01-23 16:00:00
nvd
nvd
CVE-2004-0230
2004-08-18 04:00:00
CVE-2014-6575
2015-01-21 15:28:14
CVE-2007-0442
2007-01-23 16:28:00
threatpost
threatpost
FreeBSD Patches TCP Processing DoS Vulnerability
2014-09-17 12:04:05
freebsd
freebsd
TCP denial-of-service attacks against long lived connections
1995-06-01 00:00:00
FreeBSD -- Denial of Service in TCP packet processing
2014-09-16 00:00:00
ubuntucve
ubuntucve
CVE-2004-0230
2004-08-18 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2004-0230
2013-06-24 21:00:00
cve
cve
CVE-2007-0442
2007-01-23 16:28:00
CVE-2014-6575
2015-01-21 15:28:14
prion
prion
Authentication flaw
2015-01-21 15:28:00
Design/Logic Flaw
2007-01-23 16:28:00
suse
suse
Security update for the Linux Kernel (important)
2017-02-09 21:08:33
Security update for the Linux Kernel (important)
2017-04-25 21:08:55
Security update for the Linux Kernel (important)
2017-02-17 18:08:18
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON
Related for CVE-2004-0230
nessus14openvas8debiancve1cisco2securityvulns8f52cert1fortinet1checkpoint_advisories2freebsd_advisory1symantec1packetstorm2redhatcve1cvelist3nvd3threatpost1freebsd2ubuntucve1checkpoint_security1cve2prion2suse4oracle1avleonov1