PT-2004-1346 · Freebsd+1 · Freebsd+1

Publicado 2004-03-15 · Atualizado 2017-10-10 · CVE-2004-0171

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.1 and earlier Mac OS X versions prior to 10.3.4

Description The issue allows remote attackers to cause a denial of service, resulting in resource exhaustion of memory buffers and system crash, by sending a large number of out-of-sequence TCP packets. This prevents the operating system from creating new connections.

Recommendations For FreeBSD versions 5.1 and earlier, update to a version later than 5.1 to resolve the issue. For Mac OS X versions prior to 10.3.4, update to version 10.3.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0171

Produtos afetados

Freebsd

Macos X

Referências · 8

• http://idefense.com/application/poi/display?id=78&type=vulnerabilities · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15369 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0171 · Nota de Segurança
• http://securityfocus.com/bid/9792 · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc · Aviso do Fabricante
• http://lists.seifried.org/pipermail/security/2004-May/003743.html · Aviso do Fabricante
• http://osvdb.org/4124 · Nota
• http://kb.cert.org/vuls/id/395670 · Nota