CVE-2004-1060 Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forge...
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icmp | All versions | No fix listed |
| tcp | All versions | No fix listed |
References
- SSRT4743 vendor-advisory
- 18317 third-party-advisory
- 19 third-party-advisory
- 57 third-party-advisory
- 20050412 Crafted ICMP Messages Can Cause Denial of Service vendor-advisory
- www.gont.com.ar vendor-advisory
- HPSBUX01164 vendor-advisory
- 13124 vdb-entry
- www.uniras.gov.uk vendor-advisory
- MS05-019 vendor-advisory
- oval:org.mitre.oval:def:181 signature vdb-entry
- oval:org.mitre.oval:def:196 signature vdb-entry
- oval:org.mitre.oval:def:2188 signature vdb-entry
- oval:org.mitre.oval:def:3826 signature vdb-entry
- oval:org.mitre.oval:def:405 signature vdb-entry
- oval:org.mitre.oval:def:5386 signature vdb-entry
- oval:org.mitre.oval:def:651 signature vdb-entry
- oval:org.mitre.oval:def:780 signature vdb-entry
- oval:org.mitre.oval:def:899 signature vdb-entry