CVE-2005-3774 Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not prod...
MediumCVSS 5.0
EPSS 18.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco pix | = 6.3 | No fix listed |
| cisco pix | = 7.0 | No fix listed |
References
- 20051122 Cisco PIX TCP Connection Prevention mailing-list vendor-advisory
- 20051122 Cisco PIX TCP Connection Prevention mailing-list
- 17670 third-party-advisory
- 1015256 vdb-entry
- www.cisco.com
- 20051128 Response to Cisco PIX TCP Connection Prevention vendor-advisory
- VU#853540 third-party-advisory us-government-resource
- 24140 vdb-entry
- 20051122 Cisco PIX TCP Connection Prevention mailing-list
- 20060307 Cisco PIX embryonic state machine 1b data DoS mailing-list
- 20060307 Cisco PIX embryonic state machine TTL(n-1) DoS mailing-list
- 20060307 RE: Cisco PIX embryonic state machine 1b data DoS mailing-list
- 15525 vdb-entry
- ADV-2005-2546 vdb-entry
- cisco-pix-tcp-data-field-dos(25077) vdb-entry
- cisco-pix-ttl-dos(25079) vdb-entry