PT-2005-4685 · Microsoft · Windows 2003+1

Publicado 2005-12-01 · Atualizado 2019-04-30 · CVE-2005-3945

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2003 versions prior to SP1 Microsoft Windows 2000 versions prior to SP4 with Update Roll-up

Description The issue concerns the SynAttackProtect protection mechanism, which uses a hash of predictable data. This allows remote attackers to cause a denial of service by flooding the system with SYN packets that produce identical hash values, slowing down hash table lookups.

Recommendations For Microsoft Windows 2003 versions prior to SP1, apply Service Pack 1 to resolve the issue. For Microsoft Windows 2000 versions prior to SP4 with Update Roll-up, apply Service Pack 4 with Update Roll-up to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-3945

Produtos afetados

Windows 2000

Windows 2003

Referências · 3

• http://securityfocus.com/bid/15613 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3945 · Nota de Segurança
• http://securityfocus.com/archive/1/417952/100/0/threaded · Nota