vulnwire
5.0med

CVE-2004-02307 exploits

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connecti…

Published 22 y ago · modified 30 d ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
80.3%
percentile 100%
Public exploits
7
Exploit-DB

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

CISA SSVC assessment

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
30 d ago

Exploit prediction (EPSS)

80.29% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-942 Microsoft Windows - Malformed IP Options Denial of Service (MS05-019) · dos · 2005-04-17
  • EDB-291 TCP Connection Reset - Remote Denial of Service · dos · 2004-04-23
  • EDB-276 Microsoft Windows XP/2000 - TCP Connection Reset · dos · 2004-04-22
  • EDB-24033 Multiple Vendor - TCP Sequence Number Approximation (4) · remote · 2004-04-23
  • EDB-24032 Multiple Vendor - TCP Sequence Number Approximation (3) · remote · 2004-04-20
  • EDB-24031 Multiple Vendor - TCP Sequence Number Approximation (2) · remote · 2004-04-20
  • EDB-24030 Multiple Vendor - TCP Sequence Number Approximation (1) · remote · 2004-03-05

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • us-cert.gov /cas/techalerts/TA04-111A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • marc.info /?l=bugtraq&m=108302060014745&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/449179/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • uniras.gov.uk /vuls/2004/236929/index.htm · x_refsource_MISC, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2006/ms06-064 · vendor-advisory, x_refsource_MS, x_transferred
  • secunia.com /advisories/11440 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • kb.juniper.net /JSA10638 · x_refsource_CONFIRM, x_transferred
  • kc.mcafee.com /corporate/index?page=content&id=SB10053 · x_refsource_CONFIRM, x_transferred
  • oracle.com /technetwork/topics/security/cpujan2015-1972971.html · x_refsource_CONFIRM, x_transferred
  • kb.cert.org /vuls/id/415294 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • marc.info /?l=bugtraq&m=108506952116653&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2005/ms05-019 · vendor-advisory, x_refsource_MS, x_transferred
  • cisco.com /warp/public/707/cisco-sa-20040420-tcp-ios.shtml · vendor-advisory, x_refsource_CISCO, x_transferred
  • securityfocus.com /bid/10183 · vdb-entry, x_refsource_BID, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/15886 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /4030 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/22341 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2006/3983 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/11458 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.