CVE-2004-0307 Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way....
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco optical networking systems software | = 1.0 | No fix listed |
| cisco optical networking systems software | = 4.0(1) | No fix listed |
| cisco optical networking systems software | = 4.0(2) | No fix listed |
| cisco optical networking systems software | = 4.0.0 | No fix listed |
| cisco optical networking systems software | = 4.1(0) | No fix listed |
| cisco optical networking systems software | = 4.1(1) | No fix listed |
| cisco optical networking systems software | = 4.1(2) | No fix listed |
| cisco optical networking systems software | = 4.1(3) | No fix listed |
| cisco optical networking systems software | = 4.1.0 | No fix listed |
| cisco optical networking systems software | = 4.5 | No fix listed |
References
- 20040219 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities patch vendor-advisory
- 4009 vdb-entry
- 9699 patch vdb-entry vendor-advisory
- cisco-ons-ack-dos(15265) vdb-entry