Lucene search
RootSSV:12271HistorySep 11, 2009 - 12:00 a.m.
Windows 2000 TCP/IP窗口大小拒绝服务漏洞(MS09-048)
2009-09-1100:00:00
Root
www.seebug.org
78
0.051 Low
EPSS
Percentile
92.0%
CVE ID：CVE-2008-4609
Microsoft Windows是一款流行的操作系统。
Microsoft Windows TCP/IP堆栈处理存在一个错误，可导致连接一直处于FIN-WAIT-1或FIN-WAIT-2状态，攻击者构建一个TCP接收窗口大小设置为零或极小值的恶意报文，"淹没"受此漏洞影响的系统，可导致系统停止对新请求的响应，造成拒绝服务攻击。
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
用户可参考如下安全公告获得补丁信息：
http://www.microsoft.com/technet/security/Bulletin/MS09-048.mspx
Related
prion
prion
Design/Logic Flaw
2008-10-20 17:59:00
Code injection
2009-09-08 23:30:00
cbl_mariner
cbl_mariner
CVE-2008-4609 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2008-4609 affecting package kernel 5.10.111.1-1
2021-09-09 15:03:26
checkpoint_security
checkpoint_security
Check Point response to Sockstress TCP DoS attacks (CVE-2008-4609)
2009-09-05 21:00:00
f5
f5
SOL10509 - Sockstress DoS tool vulnerability CVE-2008-4609
2009-09-07 00:00:00
nessus
nessus
securityvulns
securityvulns
ubuntucve
ubuntucve
CVE-2008-4609
2008-10-20 00:00:00
cve
cve
CVE-2008-4609
2008-10-20 17:59:00
CVE-2009-0627
2009-09-08 23:30:00
debiancve
debiancve
CVE-2008-4609
2008-10-20 17:59:00
cisco
cisco
cert
cert
TCP may keep its offered receive window closed indefinitely (RFC 1122)
2009-11-23 00:00:00
checkpoint_advisories
checkpoint_advisories
TCP Window Size Enforcement (CVE-2008-4609; CVE-2009-1925; CVE-2009-1926)
2009-09-08 00:00:00
openvas
openvas
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
2009-09-10 00:00:00
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (967723)
2009-09-10 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2012
2012-07-17 00:00:00
avleonov
avleonov