PT-2005-4431 · None · Tcp

David Wetherall + 4 · Publicado 2005-11-18 · Atualizado 2017-07-11 · CVE-2005-3675

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Transmission Control Protocol (TCP) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service by consuming bandwidth. This is achieved by sending ACK messages for packets that have not yet been received, which can cause the sender to increase its transmission rate until it fills available bandwidth.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3675

Produtos afetados

Tcp

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-3675 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23055 · Nota
• http://kb.cert.org/vuls/id/102014 · Nota
• http://cs.umd.edu/~capveg/optack/optack-extended.pdf · Nota
• http://securityfocus.com/bid/15468 · Nota