PT-2005-1728 · Microsoft · Windows Xp+2

Publicado 2005-03-05 · Atualizado 2018-10-19 · CVE-2005-0688

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows XP version SP2 Windows Server 2003

Description A denial of service issue exists due to a TCP packet with the SYN flag set and the same destination and source address and port, which can cause CPU consumption. This issue is related to the IPv6 implementation of TCP/IP and can cause the affected system to stop responding.

Recommendations For Windows XP SP2, ensure Windows Firewall is turned on to mitigate the risk. For Windows Server 2003, consider implementing firewall rules to restrict incoming TCP packets with the SYN flag set and the same destination and source address and port as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-0688

Produtos afetados

Windows

Windows Server 2003

Windows Xp

Referências · 26

• 🔥 https://exploit-db.com/exploits/861 · Exploit
• 🔥 https://exploit-db.com/exploits/942 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978 · Nota
• http://vupen.com/english/advisories/2006/3983 · Nota
• http://oval.mitre.org/oval/definitions/data/oval1685.html · Nota
• http://oval.mitre.org/oval/definitions/data/oval4978.html · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4978 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2005/ms05-019 · Nota
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0688 · Nota de Segurança
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1288 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A482 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0688 · Nota de Segurança
• http://frsirt.com/english/advisories/2006/3983 · Nota
• http://marc.theaimsgroup.com/?l=bugtraq&m=111005099504081&w=2 · Nota