Lucene search

[email protected]NVD:CVE-2006-1242

HistoryMar 15, 2006 - 5:06 p.m.

CVE-2006-1242

2006-03-1517:06:00

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.4.0

linuxlinux_kernelMatch2.4.0test1

linuxlinux_kernelMatch2.4.0test10

linuxlinux_kernelMatch2.4.0test11

linuxlinux_kernelMatch2.4.0test12

linuxlinux_kernelMatch2.4.0test2

linuxlinux_kernelMatch2.4.0test3

linuxlinux_kernelMatch2.4.0test4

linuxlinux_kernelMatch2.4.0test5

linuxlinux_kernelMatch2.4.0test6

linuxlinux_kernelMatch2.4.0test7

linuxlinux_kernelMatch2.4.0test8

linuxlinux_kernelMatch2.4.0test9

linuxlinux_kernelMatch2.4.1

linuxlinux_kernelMatch2.4.2

linuxlinux_kernelMatch2.4.3

linuxlinux_kernelMatch2.4.4

linuxlinux_kernelMatch2.4.5

linuxlinux_kernelMatch2.4.6

linuxlinux_kernelMatch2.4.7

linuxlinux_kernelMatch2.4.8

linuxlinux_kernelMatch2.4.9

linuxlinux_kernelMatch2.4.10

linuxlinux_kernelMatch2.4.11

linuxlinux_kernelMatch2.4.12

linuxlinux_kernelMatch2.4.13

linuxlinux_kernelMatch2.4.14

linuxlinux_kernelMatch2.4.15

linuxlinux_kernelMatch2.4.16

linuxlinux_kernelMatch2.4.17

linuxlinux_kernelMatch2.4.18

linuxlinux_kernelMatch2.4.18x86

linuxlinux_kernelMatch2.4.18pre1

linuxlinux_kernelMatch2.4.18pre2

linuxlinux_kernelMatch2.4.18pre3

linuxlinux_kernelMatch2.4.18pre4

linuxlinux_kernelMatch2.4.18pre5

linuxlinux_kernelMatch2.4.18pre6

linuxlinux_kernelMatch2.4.18pre7

linuxlinux_kernelMatch2.4.18pre8

linuxlinux_kernelMatch2.4.19

linuxlinux_kernelMatch2.4.19pre1

linuxlinux_kernelMatch2.4.19pre2

linuxlinux_kernelMatch2.4.19pre3

linuxlinux_kernelMatch2.4.19pre4

linuxlinux_kernelMatch2.4.19pre5

linuxlinux_kernelMatch2.4.19pre6

linuxlinux_kernelMatch2.4.20

linuxlinux_kernelMatch2.4.21

linuxlinux_kernelMatch2.4.21pre1

linuxlinux_kernelMatch2.4.21pre4

linuxlinux_kernelMatch2.4.21pre7

linuxlinux_kernelMatch2.4.22

linuxlinux_kernelMatch2.4.23

linuxlinux_kernelMatch2.4.23pre9

linuxlinux_kernelMatch2.4.23_ow2

linuxlinux_kernelMatch2.4.24

linuxlinux_kernelMatch2.4.24_ow1

linuxlinux_kernelMatch2.4.25

linuxlinux_kernelMatch2.4.26

linuxlinux_kernelMatch2.4.27

linuxlinux_kernelMatch2.4.27pre1

linuxlinux_kernelMatch2.4.27pre2

linuxlinux_kernelMatch2.4.27pre3

linuxlinux_kernelMatch2.4.27pre4

linuxlinux_kernelMatch2.4.27pre5

linuxlinux_kernelMatch2.4.28

linuxlinux_kernelMatch2.4.29

linuxlinux_kernelMatch2.4.29rc1

linuxlinux_kernelMatch2.4.29rc2

linuxlinux_kernelMatch2.4.30

linuxlinux_kernelMatch2.4.30rc2

linuxlinux_kernelMatch2.4.30rc3

linuxlinux_kernelMatch2.4.31

linuxlinux_kernelMatch2.4.31pre1

linuxlinux_kernelMatch2.4.32

linuxlinux_kernelMatch2.4.32pre1

linuxlinux_kernelMatch2.4.32pre2

linuxlinux_kernelMatch2.4.33pre1

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.0test1

linuxlinux_kernelMatch2.6.0test10

linuxlinux_kernelMatch2.6.0test11

linuxlinux_kernelMatch2.6.0test2

linuxlinux_kernelMatch2.6.0test3

linuxlinux_kernelMatch2.6.0test4

linuxlinux_kernelMatch2.6.0test5

linuxlinux_kernelMatch2.6.0test6

linuxlinux_kernelMatch2.6.0test7

linuxlinux_kernelMatch2.6.0test8

linuxlinux_kernelMatch2.6.0test9

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.1rc1

linuxlinux_kernelMatch2.6.1rc2

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.3

linuxlinux_kernelMatch2.6.4

linuxlinux_kernelMatch2.6.5

linuxlinux_kernelMatch2.6.6

linuxlinux_kernelMatch2.6.6rc1

linuxlinux_kernelMatch2.6.7

linuxlinux_kernelMatch2.6.7rc1

linuxlinux_kernelMatch2.6.8

linuxlinux_kernelMatch2.6.8rc1

linuxlinux_kernelMatch2.6.8rc2

linuxlinux_kernelMatch2.6.8rc3

linuxlinux_kernelMatch2.6.92.6.20

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.10rc2

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11rc2

linuxlinux_kernelMatch2.6.11rc3

linuxlinux_kernelMatch2.6.11rc4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12rc1

linuxlinux_kernelMatch2.6.12rc4

linuxlinux_kernelMatch2.6.12rc5

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.13rc1

linuxlinux_kernelMatch2.6.13rc4

linuxlinux_kernelMatch2.6.13rc6

linuxlinux_kernelMatch2.6.13rc7

linuxlinux_kernelMatch2.6.13.1

linuxlinux_kernelMatch2.6.13.2

linuxlinux_kernelMatch2.6.13.3

linuxlinux_kernelMatch2.6.13.4

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14rc1

linuxlinux_kernelMatch2.6.14rc2

linuxlinux_kernelMatch2.6.14rc3

linuxlinux_kernelMatch2.6.14rc4

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.14.5

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15rc1

linuxlinux_kernelMatch2.6.15rc3

linuxlinux_kernelMatch2.6.15.1

linuxlinux_kernelMatch2.6.15.2

linuxlinux_kernelMatch2.6.15.3

linuxlinux_kernelMatch2.6.15.4

linuxlinux_kernelMatch2.6.15.5

linuxlinux_kernelMatch2.6_test9_cvs

References

secunia.com/advisories/19402

secunia.com/advisories/19955

secunia.com/advisories/20157

secunia.com/advisories/20398

secunia.com/advisories/20671

secunia.com/advisories/20914

secunia.com/advisories/21136

secunia.com/advisories/21465

secunia.com/advisories/21983

secunia.com/advisories/22417

support.avaya.com/elmodocs2/security/ASA-2006-180.htm

support.avaya.com/elmodocs2/security/ASA-2006-200.htm

www.debian.org/security/2006/dsa-1097

www.debian.org/security/2006/dsa-1103

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1

www.mandriva.com/security/advisories?name=MDKSA-2006:086

www.novell.com/linux/security/advisories/2006-05-31.html

www.redhat.com/support/errata/RHSA-2006-0437.html

www.redhat.com/support/errata/RHSA-2006-0575.html

www.securityfocus.com/archive/1/427622/100/0/threaded

www.securityfocus.com/archive/1/427753/100/0/threaded

www.securityfocus.com/archive/1/427893/100/0/threaded

www.securityfocus.com/archive/1/428605/30/6210/threaded

www.securityfocus.com/bid/17109

www.vupen.com/english/advisories/2006/1140

www.vupen.com/english/advisories/2006/2554

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317

usn.ubuntu.com/281-1/

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.3 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

Related for NVD:CVE-2006-1242

cvelist1 cve1 ubuntucve1 prion1 ubuntu1 securityvulns1 nessus8 centos2 redhat2 openvas4 osv2 debian2 suse1