CVE-2005-1649 The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SY...
MediumCVSS 5.0
EPSS 21.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | = datacenter_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = standard-sp1 | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 2003 server | = web-sp1 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20050516 Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack. exploit mailing-list vendor-advisory
- 13658 exploit vdb-entry
- ADV-2005-0559 vdb-entry