PT-2009-4385 · Microsoft · Windows Server 2003+5

Published 2009-09-08 · Updated 2023-12-07 · CVE-2009-1926

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2

Description: A denial of service issue exists due to an error in TCP/IP processing when handling specially crafted packets with a small or zero TCP receive window size. This can cause a system to stop responding to new requests if an attacker floods it with such packets, leading to a denial of service. The issue arises when an application closes a TCP connection with pending data and the attacker has set a small or zero TCP receive window size, preventing the server from completely closing the connection.

Recommendations: For Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2, consider implementing configuration changes to mitigate the risk of exploitation, such as adjusting TCP/IP settings to handle small or zero receive window sizes more effectively. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-1926

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2009-1926 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1926 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-048 · Vendor Advisory
• http://securityfocus.com/archive/1/506331/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA09-251A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/ms09-048 · Note
• http://recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5965 · Note
• http://securityfocus.com/bid/36269 · Note
• http://osvdb.org/57797 · Note