Lucene search

[email protected]CVE-2004-0002

HistoryMar 03, 2004 - 5:00 a.m.

CVE-2004-0002

2004-03-0305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0002

tcp mss

netinet

denial of service

resource exhaustion

vulnerability

nvd

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.1%

JSON

The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.

CPENameOperatorVersion
freebsd:freebsdfreebsdeq4.3
freebsd:freebsdfreebsdeq4.1.1
freebsd:freebsdfreebsdeq4.6
freebsd:freebsdfreebsdeq3.1
freebsd:freebsdfreebsdeq3.0
freebsd:freebsdfreebsdeq5.1
freebsd:freebsdfreebsdeq4.4
freebsd:freebsdfreebsdeq4.8
freebsd:freebsdfreebsdeq4.7
freebsd:freebsdfreebsdeq5.0

CPE	Name	Operator	Version
freebsd:freebsd	freebsd	eq	4.3
freebsd:freebsd	freebsd	eq	4.1.1
freebsd:freebsd	freebsd	eq	4.6
freebsd:freebsd	freebsd	eq	3.1
freebsd:freebsd	freebsd	eq	3.0
freebsd:freebsd	freebsd	eq	5.1
freebsd:freebsd	freebsd	eq	4.4
freebsd:freebsd	freebsd	eq	4.8
freebsd:freebsd	freebsd	eq	4.7
freebsd:freebsd	freebsd	eq	5.0

Rows per page:

1-10 of 221

References

lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.1%

JSON