PT-2005-1728 · Microsoft · Windows Xp+2

Published 2005-03-05 · Updated 2018-10-19 · CVE-2005-0688

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows XP version SP2 Windows Server 2003

Description A denial of service issue exists due to a TCP packet with the SYN flag set and the same destination and source address and port, which can cause CPU consumption. This issue is related to the IPv6 implementation of TCP/IP and can cause the affected system to stop responding.

Recommendations For Windows XP SP2, ensure Windows Firewall is turned on to mitigate the risk. For Windows Server 2003, consider implementing firewall rules to restrict incoming TCP packets with the SYN flag set and the same destination and source address and port as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0688

Affected Products

Windows

Windows Server 2003

Windows Xp

References · 26

• 🔥 https://exploit-db.com/exploits/861 · Exploit
• 🔥 https://exploit-db.com/exploits/942 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0688 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-0688 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064 · Vendor Advisory
• http://securityfocus.com/archive/1/449179/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4978 · Note
• http://vupen.com/english/advisories/2006/3983 · Note
• http://oval.mitre.org/oval/definitions/data/oval1685.html · Note
• http://oval.mitre.org/oval/definitions/data/oval4978.html · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4978 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2005/ms05-019 · Note
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1288 · Note