CVE-2004-0230

Public Exploit

Description

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 11.76% Top 10%

Vendor Advisory securityfocus.com Vendor Advisory microsoft.com Vendor Advisory marc.info Vendor Advisory sco.com Vendor Advisory sgi.com Vendor Advisory microsoft.com Vendor Advisory cisco.com Vendor Advisory sco.com Vendor Advisory sco.com Vendor Advisory netbsd.org

Affected: n/a n/a

References

Link	Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689	vdb entry signature broken link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508	vdb entry signature broken link
http://www.us-cert.gov/cas/techalerts/TA04-111A.html	third party advisory us government resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711	vdb entry signature broken link
http://marc.info/?l=bugtraq&m=108302060014745&w=2	mailing list
http://www.securityfocus.com/archive/1/449179/100/0/threaded	vendor advisory broken link
http://www.uniras.gov.uk/vuls/2004/236929/index.htm	broken link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064	third party advisory vendor advisory
http://secunia.com/advisories/11440	permissions required vdb entry third party advisory broken link
http://kb.juniper.net/JSA10638	third party advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10053	third party advisory patch broken link
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	third party advisory patch
http://www.kb.cert.org/vuls/id/415294	third party advisory us government resource
http://marc.info/?l=bugtraq&m=108506952116653&w=2	mailing list vendor advisory
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt	broken link third party advisory vendor advisory
ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc	broken link third party advisory vendor advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019	third party advisory vendor advisory
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml	vendor advisory broken link
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt	broken link third party advisory vendor advisory
http://www.securityfocus.com/bid/10183	exploit vdb entry third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791	vdb entry signature broken link
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt	broken link third party advisory vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270	vdb entry signature broken link
https://exchange.xforce.ibmcloud.com/vulnerabilities/15886	vdb entry third party advisory
http://www.osvdb.org/4030	vdb entry broken link
http://secunia.com/advisories/22341	permissions required vdb entry third party advisory broken link
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc	broken link third party advisory vendor advisory
http://www.vupen.com/english/advisories/2006/3983	permissions required vdb entry broken link
http://secunia.com/advisories/11458	permissions required vdb entry third party advisory broken link

Frequently Asked Questions

What is the severity of CVE-2004-0230?: CVE-2004-0230 has been scored as a medium severity vulnerability.
How to fix CVE-2004-0230?: To fix CVE-2004-0230, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0230 being actively exploited in the wild?: It is possible that CVE-2004-0230 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~12% probability that this vulnerability will be exploited by malicious actors in the next 30 days.