PT-2004-1346 · Freebsd+1 · Freebsd+1

Published 2004-03-15 · Updated 2017-10-10 · CVE-2004-0171

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.1 and earlier Mac OS X versions prior to 10.3.4

Description The issue allows remote attackers to cause a denial of service, resulting in resource exhaustion of memory buffers and system crash, by sending a large number of out-of-sequence TCP packets. This prevents the operating system from creating new connections.

Recommendations For FreeBSD versions 5.1 and earlier, update to a version later than 5.1 to resolve the issue. For Mac OS X versions prior to 10.3.4, update to version 10.3.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0171

Affected Products

Freebsd

Macos X

References · 8

• http://idefense.com/application/poi/display?id=78&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0171 · Security Note
• http://securityfocus.com/bid/9792 · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc · Vendor Advisory
• http://lists.seifried.org/pipermail/security/2004-May/003743.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15369 · Note
• http://osvdb.org/4124 · Note
• http://kb.cert.org/vuls/id/395670 · Note