PT-2006-2258 · Linux+1 · Linux+1

Marco Ivaldi

·

Publicado

2006-03-15

·

Atualizado

2018-10-18

·

CVE-2006-1242

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux versions 2.4.x through 2.6.15
Description The issue allows remote attackers to conduct an Idle Scan attack, which bypasses intended protections against such attacks, by exploiting the ip push pending frames function. This function increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets.
Recommendations For Linux versions 2.4.x through 2.6.15, update to version 2.6.16 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-1242
DSA-1097-1
DSA-1103
RHSA-2006:0437
RHSA-2006:0575
RHSA-2006_0575

Produtos afetados

Linux
Red Hat