CVE-2005-0356 Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoo...
MediumCVSS 5.0
EPSS 82.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco agent desktop | All versions | No fix listed |
| cisco e-mail manager | All versions | No fix listed |
| cisco emergency responder | = 1.1 | No fix listed |
| cisco intelligent contact manager | = 5.0 | No fix listed |
| cisco interactive voice response | All versions | No fix listed |
| cisco ip contact center enterprise | All versions | No fix listed |
| cisco ip contact center express | All versions | No fix listed |
| cisco meetingplace | All versions | No fix listed |
| cisco personal assistant | = 1.3(1) | No fix listed |
| cisco personal assistant | = 1.3(2) | No fix listed |
| cisco personal assistant | = 1.3(3) | No fix listed |
| cisco personal assistant | = 1.3(4) | No fix listed |
| cisco personal assistant | = 1.4(1) | No fix listed |
| cisco personal assistant | = 1.4(2) | No fix listed |
| cisco remote monitoring suite option | All versions | No fix listed |
| cisco secure access control server | = 2.0 | No fix listed |
| cisco secure access control server | = 2.1 | No fix listed |
| cisco secure access control server | = 2.3 | No fix listed |
| cisco secure access control server | = 2.3.5.1 | No fix listed |
| cisco secure access control server | = 2.3.6.1 | No fix listed |
| cisco secure access control server | = 2.4 | No fix listed |
| cisco secure access control server | = 2.5 | No fix listed |
| cisco secure access control server | = 2.6 | No fix listed |
| cisco secure access control server | = 2.6.2 | No fix listed |
| cisco secure access control server | = 2.6.3 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure access control server | = 2.6.4 | No fix listed |
| cisco secure access control server | = 2.42 | No fix listed |
| cisco secure access control server | = 3.0 | No fix listed |
| cisco secure access control server | = 3.0.1 | No fix listed |
| cisco secure access control server | = 3.0.3 | No fix listed |
| cisco secure access control server | = 3.1 | No fix listed |
| cisco secure access control server | = 3.1.1 | No fix listed |
| cisco secure access control server | = 3.2 | No fix listed |
| cisco secure access control server | = 3.2(1) | No fix listed |
| cisco secure access control server | = 3.2(1.20) | No fix listed |
| cisco secure access control server | = 3.2(2) | No fix listed |
| cisco secure access control server | = 3.2(3) | No fix listed |
| cisco secure access control server | = 3.2.1 | No fix listed |
| cisco secure access control server | = 3.2.2 | No fix listed |
| cisco secure access control server | = 3.3 | No fix listed |
| cisco secure access control server | = 3.3(1) | No fix listed |
| cisco secure access control server | = 3.3.1 | No fix listed |
| cisco secure access control server | = 3.3.2 | No fix listed |
| cisco support tools | All versions | No fix listed |
| cisco web collaboration option | All versions | No fix listed |
| Hitachi alaxala | = ax | No fix listed |
| cisco call manager | = 1.0 | No fix listed |
| cisco call manager | = 2.0 | No fix listed |
| cisco call manager | = 3.0 | No fix listed |
| cisco call manager | = 3.1 | No fix listed |
| cisco call manager | = 3.1(2) | No fix listed |
| cisco call manager | = 3.1(3a) | No fix listed |
| cisco call manager | = 3.2 | No fix listed |
| cisco call manager | = 3.3 | No fix listed |
| cisco call manager | = 3.3(3) | No fix listed |
| cisco call manager | = 4.0 | No fix listed |
| cisco unity server | = 2.0 | No fix listed |
| cisco unity server | = 2.1 | No fix listed |
| cisco unity server | = 2.2 | No fix listed |
| cisco unity server | = 2.3 | No fix listed |
| cisco unity server | = 2.4 | No fix listed |
| cisco unity server | = 2.46 | No fix listed |
| cisco unity server | = 3.0 | No fix listed |
| cisco unity server | = 3.1 | No fix listed |
| cisco unity server | = 3.2 | No fix listed |
| cisco unity server | = 3.3 | No fix listed |
| cisco unity server | = 4.0 | No fix listed |
| cisco mgx 8230 | = 1.2.10 | No fix listed |
| cisco mgx 8230 | = 1.2.11 | No fix listed |
| cisco mgx 8250 | = 1.2.10 | No fix listed |
| cisco mgx 8250 | = 1.2.11 | No fix listed |
| ciscoworks access control list manager | = 1.5 | No fix listed |
| ciscoworks access control list manager | = 1.6 | No fix listed |
| ciscoworks common management foundation | = 2.0 | No fix listed |
| ciscoworks common management foundation | = 2.1 | No fix listed |
| ciscoworks common management foundation | = 2.2 | No fix listed |
| ciscoworks common services | = 2.2 | No fix listed |
| ciscoworks lms | = 1.3 | No fix listed |
| ciscoworks vpn security management solution | All versions | No fix listed |
| ciscoworks windows | All versions | No fix listed |
| cisco webns | = 7.10_(05.07)s | No fix listed |
| cisco webns | = 7.20_(03.09)s | No fix listed |
| cisco webns | = 7.20_(03.10)s | No fix listed |
| cisco webns | = 7.30_(00.08)s | No fix listed |
| cisco webns | = 7.30_(00.09)s | No fix listed |
| nortel business communications manager | = 200 | No fix listed |
| nortel business communications manager | = 400 | No fix listed |
| nortel business communications manager | = 1000 | No fix listed |
| nortel callpilot | = 200i | No fix listed |
| nortel callpilot | = 201i | No fix listed |
| nortel callpilot | = 702t | No fix listed |
| nortel callpilot | = 703t | No fix listed |
| nortel contact center | All versions | No fix listed |
| cisco content services switch 11000 | All versions | No fix listed |
| cisco content services switch 11050 | All versions | No fix listed |
| cisco content services switch 11150 | All versions | No fix listed |
| cisco content services switch 11500 | All versions | No fix listed |
| cisco content services switch 11501 | All versions | No fix listed |
| cisco content services switch 11503 | All versions | No fix listed |
| cisco content services switch 11506 | All versions | No fix listed |
| cisco content services switch 11800 | All versions | No fix listed |
| nortel 7220 wlan access point | All versions | No fix listed |
| nortel 7250 wlan access point | All versions | No fix listed |
| nortel ethernet routing switch 1612 | All versions | No fix listed |
| nortel ethernet routing switch 1624 | All versions | No fix listed |
| nortel ethernet routing switch 1648 | All versions | No fix listed |
| nortel optical metro 5000 | All versions | No fix listed |
| nortel optical metro 5100 | All versions | No fix listed |
| nortel optical metro 5200 | All versions | No fix listed |
| nortel succession communication server 1000 | All versions | No fix listed |
| nortel survivable remote gateway | = 1.0 | No fix listed |
| nortel universal signaling point | = 5200 | No fix listed |
| nortel universal signaling point | = compact_lite | No fix listed |
| ciscoworks 1105 hosting solution engine | All versions | No fix listed |
| ciscoworks 1105 wireless lan solution engine | All versions | No fix listed |
| ciscoworks cd1 | = 1st | No fix listed |
| ciscoworks cd1 | = 2nd | No fix listed |
| ciscoworks cd1 | = 3rd | No fix listed |
| ciscoworks cd1 | = 4th | No fix listed |
| ciscoworks cd1 | = 5th | No fix listed |
| ciscoworks windows wug | All versions | No fix listed |
| cisco conference connection | = 1.1(1) | No fix listed |
| cisco conference connection | = 1.2 | No fix listed |
| freebsd | = 1.1.5.1 | No fix listed |
| freebsd | = 2.0 | No fix listed |
| freebsd | = 2.0.5 | No fix listed |
| freebsd | = 2.1.0 | No fix listed |
| freebsd | = 2.1.5 | No fix listed |
| freebsd | = 2.1.6 | No fix listed |
| freebsd | = 2.1.6.1 | No fix listed |
| freebsd | = 2.1.7.1 | No fix listed |
| freebsd | = 2.2 | No fix listed |
| freebsd | = 2.2.2 | No fix listed |
| freebsd | = 2.2.3 | No fix listed |
| freebsd | = 2.2.4 | No fix listed |
| freebsd | = 2.2.5 | No fix listed |
| freebsd | = 2.2.6 | No fix listed |
| freebsd | = 2.2.8 | No fix listed |
| freebsd | = 3.0 | No fix listed |
| freebsd | = 3.0-releng | No fix listed |
| freebsd | = 3.1 | No fix listed |
| freebsd | = 3.2 | No fix listed |
| freebsd | = 3.3 | No fix listed |
| freebsd | = 3.4 | No fix listed |
| freebsd | = 3.5 | No fix listed |
| freebsd | = 3.5-stable | No fix listed |
| freebsd | = 3.5.1 | No fix listed |
| freebsd | = 3.5.1-release | No fix listed |
| freebsd | = 3.5.1-stable | No fix listed |
| freebsd | = 4.0 | No fix listed |
| freebsd | = 4.0-alpha | No fix listed |
| freebsd | = 4.0-releng | No fix listed |
| freebsd | = 4.1 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.1.1-release | No fix listed |
| freebsd | = 4.1.1-stable | No fix listed |
| freebsd | = 4.2 | No fix listed |
| freebsd | = 4.2-stable | No fix listed |
| freebsd | = 4.3 | No fix listed |
| freebsd | = 4.3-release | No fix listed |
| freebsd | = 4.3-release_p38 | No fix listed |
| freebsd | = 4.3-releng | No fix listed |
| freebsd | = 4.3-stable | No fix listed |
| freebsd | = 4.4 | No fix listed |
| freebsd | = 4.4-release_p42 | No fix listed |
| freebsd | = 4.4-releng | No fix listed |
| freebsd | = 4.4-stable | No fix listed |
| freebsd | = 4.5 | No fix listed |
| freebsd | = 4.5-release | No fix listed |
| freebsd | = 4.5-release_p32 | No fix listed |
| freebsd | = 4.5-releng | No fix listed |
| freebsd | = 4.5-stable | No fix listed |
| freebsd | = 4.6 | No fix listed |
| freebsd | = 4.6-release | No fix listed |
| freebsd | = 4.6-release_p20 | No fix listed |
| freebsd | = 4.6-releng | No fix listed |
| freebsd | = 4.6-stable | No fix listed |
| freebsd | = 4.6.2 | No fix listed |
| freebsd | = 4.7 | No fix listed |
| freebsd | = 4.7-release | No fix listed |
| freebsd | = 4.7-release_p17 | No fix listed |
| freebsd | = 4.7-releng | No fix listed |
| freebsd | = 4.7-stable | No fix listed |
| freebsd | = 4.8 | No fix listed |
| freebsd | = 4.8-pre-release | No fix listed |
| freebsd | = 4.8-release_p6 | No fix listed |
| freebsd | = 4.8-releng | No fix listed |
| freebsd | = 4.9 | No fix listed |
| freebsd | = 4.9-pre-release | No fix listed |
| freebsd | = 4.9-releng | No fix listed |
| freebsd | = 4.10 | No fix listed |
| freebsd | = 4.10-release | No fix listed |
| freebsd | = 4.10-release_p8 | No fix listed |
| freebsd | = 4.10-releng | No fix listed |
| freebsd | = 4.11-release_p3 | No fix listed |
| freebsd | = 4.11-releng | No fix listed |
| freebsd | = 4.11-stable | No fix listed |
| freebsd | = 5.0 | No fix listed |
| freebsd | = 5.0-alpha | No fix listed |
| freebsd | = 5.0-release_p14 | No fix listed |
References
- 15393 third-party-advisory
- 15417 patch third-party-advisory
- 18222 third-party-advisory
- 18662 third-party-advisory
- support.avaya.com
- 20050518 Vulnerability in a Variant of the TCP Timestamps Option vendor-advisory
- VU#637934 third-party-advisory us-government-resource
- 13676 exploit vdb-entry
- tcp-ip-timestamp-dos(20635) vdb-entry