PT-2008-5824 · Linux+3 · Linux+6

Jack C. Louis · Publicado 2008-10-20 · Atualizado 2026-03-14 · CVE-2008-4609

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux (affected versions not specified) Microsoft Windows (affected versions not specified) Cisco products (affected versions not specified)

Description A denial of service issue exists due to the way TCP connections are handled, allowing remote attackers to cause connection queue exhaustion via multiple vectors that manipulate information in the TCP state table. This can be achieved by flooding a system with specially crafted packets, causing the affected system to stop responding to new requests or automatically restart. The effect of this issue can be amplified by the requirement to process packets with a TCP receive window size set to a very small value or zero. An attacker must be able to complete a TCP three-way handshake with a vulnerable system to exploit this issue.

Recommendations For Linux, at the moment, there is no information about a newer version that contains a fix for this issue. For Microsoft Windows, at the moment, there is no information about a newer version that contains a fix for this issue. For Cisco products, Cisco has released free software updates for download from the Cisco website that address these issues. Workarounds that mitigate these issues are available.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

AZL-6513

CVE-2008-4609

ECHO-6EB9-5518-7E24

Produtos afetados

Cisco Asa

Cisco Ios

Cisco Ios Xe

Cisco Products

Debian

Linux

Windows

Referências · 31

• 🔥 https://github.com/mrclki/sockstress · Exploit
• 🔥 https://github.com/marcelki/sockstress · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2008-4609 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6340 · Nota
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2008-4609 · Aviso do Fabricante
• http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4609 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2008-4609 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2008-4609 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=125856010926699&w=2 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 · Aviso do Fabricante, Correção
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090908-tcp24 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090908-tcp24 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4609 · Aviso do Fabricante
• http://cpni.gov.uk/Docs/tn-03-09-security-assessment-TCP.pdf · Nota