CVE-2005-0356

2005-05-3104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

tcp

paws

denial of service

spoofing

nvd

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.931 High

EPSS

Percentile

99.0%

JSON

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

CPENameOperatorVersion
cisco:secure_access_control_servercisco secure access control servereq3.2
cisco:mgx_8230cisco mgx 8230eq1.2.11
cisco:mgx_8250cisco mgx 8250eq1.2.10
cisco:secure_access_control_servercisco secure access control servereq3.2.2
cisco:personal_assistantcisco personal assistanteq1.3\(2\)
cisco:unity_servercisco unity servereq2.2
cisco:secure_access_control_servercisco secure access control servereq2.4
cisco:secure_access_control_servercisco secure access control servereq3.1.1
cisco:personal_assistantcisco personal assistanteq1.3\(4\)
cisco:unity_servercisco unity servereq3.0

CPE	Name	Operator	Version
cisco:secure_access_control_server	cisco secure access control server	eq	3.2
cisco:mgx_8230	cisco mgx 8230	eq	1.2.11
cisco:mgx_8250	cisco mgx 8250	eq	1.2.10
cisco:secure_access_control_server	cisco secure access control server	eq	3.2.2
cisco:personal_assistant	cisco personal assistant	eq	1.3\(2\)
cisco:unity_server	cisco unity server	eq	2.2
cisco:secure_access_control_server	cisco secure access control server	eq	2.4
cisco:secure_access_control_server	cisco secure access control server	eq	3.1.1
cisco:personal_assistant	cisco personal assistant	eq	1.3\(4\)
cisco:unity_server	cisco unity server	eq	3.0