CVE-2004-0230

Published: Aug 18, 2004Modified: Oct 9, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected (86)

Products: Juniper: Junos · Microsoft: Windows 2000, Windows 98, Windows 98se, Windows Server 2003, Windows Xp · Oracle: Solaris · +4 more

Show all products

Juniper: Junos · Microsoft: Windows 2000, Windows 98, Windows 98se, Windows Server 2003, Windows Xp · Oracle: Solaris · Openpgp: Openpgp · Mcafee: Network Data Loss Prevention · Netbsd: Netbsd · Xinuos: Openserver, Unixware

1 product

5 products

1 product

1 product

1 product

Network Data Loss Prevention

1 product

2 products

Configuration A

55 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	version < 11.4
Juniper Junos	Version 11.4
Juniper Junos	Version 11.4 r10
Juniper Junos	Version 11.4 r1
Juniper Junos	Version 11.4 r2
Juniper Junos	Version 11.4 r3
Juniper Junos	Version 11.4 r4
Juniper Junos	Version 11.4 r5
Juniper Junos	Version 11.4 r6
Juniper Junos	Version 11.4 r7
Juniper Junos	Version 11.4 r8
Juniper Junos	Version 11.4 r9
Juniper Junos	Version 11.4r13 s2
Juniper Junos	Version 11.4x27
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1r
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x44 d10
Juniper Junos	Version 12.1x44 d15
Juniper Junos	Version 12.1x44 d20
Juniper Junos	Version 12.1x44 d25
Juniper Junos	Version 12.1x44 d30
Juniper Junos	Version 12.1x44 d35
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x45 d10
Juniper Junos	Version 12.1x45 d15
Juniper Junos	Version 12.1x45 d20
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.2
Juniper Junos	Version 12.2 r1
Juniper Junos	Version 12.2 r2
Juniper Junos	Version 12.2 r3
Juniper Junos	Version 12.2 r4
Juniper Junos	Version 12.2 r5
Juniper Junos	Version 12.2 r6
Juniper Junos	Version 12.2 r7
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3 r2
Juniper Junos	Version 12.3 r3
Juniper Junos	Version 12.3 r4
Juniper Junos	Version 12.3 r5
Juniper Junos	Version 13.1
Juniper Junos	Version 13.1 r1
Juniper Junos	Version 13.1 r2
Juniper Junos	Version 13.1 r3
Juniper Junos	Version 13.2
Juniper Junos	Version 13.2 r1
Juniper Junos	Version 13.2 r2
Juniper Junos	Version 13.2 r3
Juniper Junos	Version 13.3
Juniper Junos	Version 13.3 r1

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 98	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 10
Oracle Solaris	Version 11

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Openpgp Openpgp	Version 2.6.2

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	version ≤ 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1
Mcafee Network Data Loss Prevention	Version 9.2.2

Configuration F

8 vulnerable

Vulnerable Software	Affected Versions
Netbsd Netbsd	Version 1.5.1
Netbsd Netbsd	Version 1.5.2
Netbsd Netbsd	Version 1.5.3
Netbsd Netbsd	Version 1.5
Netbsd Netbsd	Version 1.6.1
Netbsd Netbsd	Version 1.6.2
Netbsd Netbsd	Version 1.6
Netbsd Netbsd	Version 2.0

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Xinuos Openserver	Version 5.0.6
Xinuos Openserver	Version 5.0.7

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Xinuos Unixware	Version 7.1.1
Xinuos Unixware	Version 7.1.3

References (58)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc (unsafe URL)

Source: cve@mitre.org

Broken LinkThird Party Advisory

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt (unsafe URL)

Source: cve@mitre.org

Broken LinkThird Party Advisory

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt (unsafe URL)

Source: cve@mitre.org

Broken LinkThird Party Advisory

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt (unsafe URL)

Source: cve@mitre.org

Broken LinkThird Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc (unsafe URL)

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://kb.juniper.net/JSA10638

Source: cve@mitre.org

Third Party Advisory

http://marc.info/?l=bugtraq&m=108302060014745&w=2

Source: cve@mitre.org

Mailing List

http://marc.info/?l=bugtraq&m=108506952116653&w=2

Source: cve@mitre.org

Mailing List

http://secunia.com/advisories/11440

Source: cve@mitre.org

Broken LinkPermissions RequiredThird Party AdvisoryVDB Entry

http://secunia.com/advisories/11458

Source: cve@mitre.org

Broken LinkPermissions RequiredThird Party AdvisoryVDB Entry

http://secunia.com/advisories/22341

Source: cve@mitre.org

Broken LinkPermissions RequiredThird Party AdvisoryVDB Entry

http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml

Source: cve@mitre.org

Broken Link

http://www.kb.cert.org/vuls/id/415294

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.osvdb.org/4030

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/449179/100/0/threaded

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/10183

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.uniras.gov.uk/vuls/2004/236929/index.htm

Source: cve@mitre.org

Broken Link

http://www.us-cert.gov/cas/techalerts/TA04-111A.html

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/3983

Source: cve@mitre.org

Broken LinkPermissions Required

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019

Source: cve@mitre.org

Third Party Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15886

Source: cve@mitre.org

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: cve@mitre.org

Broken LinkPatchThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711

Source: cve@mitre.org

Broken Link

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc (unsafe URL)