PT-2005-1432 · Nortel+8 · 7220 Wlan Access Point+74

Noritoshi Demizu · Published 2005-05-31 · Updated 2019-04-30 · CVE-2005-0356

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) and the timestamps option enabled (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in connection loss. This is achieved by sending a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0356

Affected Products

7220 Wlan Access Point

7250 Wlan Access Point

Agent Desktop

Aironet Ap1200

Aironet Ap350

Alaxala

Alaxala Networks

Business Communications Manager

Callmanager

Callpilot

Ciscoworks 1105 Hosting Solution Engine

Ciscoworks 1105 Wireless Lan Solution Engine

Ciscoworks Access Control List Manager

Ciscoworks Cd1

Ciscoworks Common Management Foundation

Ciscoworks Common Services

Ciscoworks Lms

Ciscoworks Vpn Security Management Solution

Ciscoworks Windows

Conference Connection

Contact Center

Content Services Switch 11000

Content Services Switch 11050

Content Services Switch 11150

Content Services Switch 11500

Content Services Switch 11501

Content Services Switch 11503

Content Services Switch 11506

Content Services Switch 11800

E-Mail Manager

Emergency Responder

Ethernet Routing Switch 1612

Ethernet Routing Switch 1624

Ethernet Routing Switch 1648

Freebsd

Gr3000

Gr4000

Gs4000

Intelligent Contact Manager

Interactive Voice Response

Ip Contact Center Enterprise

Ip Contact Center Express

Meetingplace

Mgx 8230

Mgx 8250

Openbsd

Optical Metro 5000

Optical Metro 5100

Optical Metro 5200

Personal Assistant

Remote Monitoring Suite Option

Rt105

Rt250I

Rt300I

Rt57I

Rtv700

Tx1000

Rtx1100

Rtx1500

Rtx2000

Secure Access Control Server

Sn 5420 Storage Router

Sn 5420 Storage Router Firmware

Sn 5428 Storage Router

Succession Communication Server 1000

Support Tools

Survivable Remote Gateway

Tmos

Unity Server

Universal Signaling Point

Web Collaboration Option

Webns

Windows 2000

Windows Server 2003

Windows Xp

References · 13

• 🔥 http://securityfocus.com/bid/13676 · Exploit
• 🔥 https://exploit-db.com/exploits/1008 · Exploit
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt · Vendor Advisory
• http://secunia.com/advisories/15417 · Patch
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0356 · Security Note
• http://cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml · Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm · Note
• http://secunia.com/advisories/18222 · Note
• http://secunia.com/advisories/18662 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20635 · Note
• http://kb.cert.org/vuls/id/637934 · Note
• http://secunia.com/advisories/15393 · Note