CVE-2004-0230
Status: AnalyzedMedium (5)—
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Base score: 5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 80%
- Percentile among all scored CVEs: 100
- Score date: 10/5/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (12)
CWEs
- NVD-CWE-Other
References
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt
- ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc
- http://kb.juniper.net/JSA10638
- http://marc.info/?l=bugtraq&m=108302060014745&w=2
- http://marc.info/?l=bugtraq&m=108506952116653&w=2
- http://secunia.com/advisories/11440
- http://secunia.com/advisories/11458
- http://secunia.com/advisories/22341
- http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
- http://www.kb.cert.org/vuls/id/415294
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.osvdb.org/4030
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/10183
- http://www.uniras.gov.uk/vuls/2004/236929/index.htm
- http://www.us-cert.gov/cas/techalerts/TA04-111A.html
- http://www.vupen.com/english/advisories/2006/3983
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15886
- https://kc.mcafee.com/corporate/index?page=content&id=SB10053
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt
- ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc
- http://kb.juniper.net/JSA10638
- http://marc.info/?l=bugtraq&m=108302060014745&w=2
- http://marc.info/?l=bugtraq&m=108506952116653&w=2
- http://secunia.com/advisories/11440
- http://secunia.com/advisories/11458
- http://secunia.com/advisories/22341
- http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
- http://www.kb.cert.org/vuls/id/415294
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- http://www.osvdb.org/4030
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/10183
- http://www.uniras.gov.uk/vuls/2004/236929/index.htm
- http://www.us-cert.gov/cas/techalerts/TA04-111A.html
- http://www.vupen.com/english/advisories/2006/3983
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15886
- https://kc.mcafee.com/corporate/index?page=content&id=SB10053
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711
Raw JSON (NVD)
Show
{
"id": "CVE-2004-0230",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-08-18T04:00:00.000",
"references": [
{
"url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://kb.juniper.net/JSA10638",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=108302060014745&w=2",
"tags": [
"Mailing List"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=108506952116653&w=2",
"tags": [
"Mailing List"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/11440",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/11458",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/22341",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/415294",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/4030",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10183",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA04-111A.html",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3983",
"tags": [
"Broken Link",
"Permissions Required"
],
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15886",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10053",
"tags": [
"Broken Link",
"Patch",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711",
"tags": [
"Broken Link"
],
"source": "cve@mitre.org"
},
{
"url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://kb.juniper.net/JSA10638",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=108302060014745&w=2",
"tags": [
"Mailing List"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=108506952116653&w=2",
"tags": [
"Mailing List"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/11440",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/11458",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/22341",
"tags": [
"Broken Link",
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/415294",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/4030",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/449179/100/0/threaded",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10183",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.uniras.gov.uk/vuls/2004/236929/index.htm",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA04-111A.html",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/3983",
"tags": [
"Broken Link",
"Permissions Required"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15886",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10053",
"tags": [
"Broken Link",
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP."
},
{
"lang": "es",
"value": "TCP, cuando se usa un tamaño de ventana de transmisión grande, hace más fácil a atacantes remotos adivinar números de secuencia y causar una denegación de servicio (pérdida de la conexión) en conexiones TCP persistentes inyectando repetidamente un paquete TCP RST, especialmente en protocolos que usan conexiones de vida larga, como BGP."
}
],
"lastModified": "2026-06-16T22:05:12.827",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B07F91B-3981-423E-9ECF-752CC64D4E03",
"versionEndExcluding": "11.4"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C947EA2-329F-4AC7-A1F4-64164C20CC4B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "926EDB84-E8C5-4030-8B69-CDA9BF1A9D94"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CAECB8C-6B4D-440C-B031-2CF3061393DF"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAD7336D-EAAC-4817-9D3A-5664B0AAE6AF"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC336F14-5D8D-4B28-8F47-2A5EFFC7800C"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C47F92DD-59C4-4C86-9360-86E840243123"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE6B95FB-F936-430A-B715-7430327E1872"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4A8F07B-110F-4FE4-BA09-F23A4D1DCA5B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78A3616E-9666-4D09-9ED7-EFD796E6E08E"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ACF87F1-B5DD-469A-87D6-94AD8D0758F7"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D4F8B25-B632-4C4B-9E90-3DF9FC98207B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4r13:s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A6BC136-FFA2-40AB-8E27-0B6CC153471F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4x27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80EFC6D6-43F9-4277-ACAC-D5929AF6FF7D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE524EE-245F-4750-9963-9D0FB7A6A965"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECE31A7E-657C-49FC-B3F8-5654B0C6087E"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86141A33-344E-4152-8B76-2DB383954F02"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC405A12-112D-4C9D-90DA-6ED484109793"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FC42F2D-7593-4DBE-AE89-A6B78E7F9089"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "731A6469-3DE0-491A-BCC5-7642FB347ACE"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D12A8119-3E59-4062-9A04-1F6EA48B78E9"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8B33B80-3189-4412-BFE0-359E755AB07A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4D7E551-A150-415E-80D5-374DAB29B6D7"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5306185-574A-43B4-8B3B-1B047CA36D66"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79F1F205-A4A9-4161-B6CF-55CEEFD7D8D9"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33FD6DB0-F995-4A22-A97F-6276AFE9EFB4"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABBEDB3F-5FD1-4290-A80A-7EAD9B9C38C4"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF8575EF-C83B-4241-B033-A2C020E29286"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43B661F8-1F43-4073-9275-AE1FFCB17BF8"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF88921E-18E4-49B2-AAF4-ED8C393D4750"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "144DA08B-A129-4DC6-81D2-782BD7C3074B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1936A41-302E-4546-9F7A-CAE3A3C68718"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EB55673-5857-452F-9D22-B422CC9CC3F3"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03D4519D-1289-47E9-BFB7-E3831BFD50F6"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:r7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77CDB10F-3BCE-41AF-B633-DFAC9B8A5D9F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "960059B5-0701-4B75-AB51-0A430247D9F0"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D1DCA52-DA81-495B-B516-5571F01E3B0A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67B3BF03-9919-4C12-97A3-B20161725F35"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.1:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCD4D8EB-8625-47CD-8F0E-D2FC8CAA5462"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.1:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0150A4C-2C5A-49FC-8FB3-B93CB45B8284"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.1:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFEB7A59-7536-4A92-A9C8-79FDE657B8AB"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "931D77A8-FA39-479E-91DB-CDDC9113252B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3A0A607-7D3C-4F2A-B5F5-576A70649CB1"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E9620A-7C0A-474C-919E-13609FFE580D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "672D3A38-92B4-4F33-82A6-B2D3F3403AF3"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE2FBBA2-6185-463F-96D3-9AB2C778B4F4"
},
{
"criteria": "cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FF9FF91-9184-4D18-8288-9110E35F4AE5"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "530FC172-94E1-481A-9810-26061D22B6AC"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40FC681A-7B85-4495-8DCC-C459FE7E2F13"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2354216-8103-49F9-A95C-7DE4F738BBEE"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:itanium:*",
"vulnerable": true,
"matchCriteriaId": "5AA32D8C-430E-4CA2-B2DF-FFF63714F480"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "E3C43D05-40F8-4769-BA6B-A376420EA972"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:-:*",
"vulnerable": true,
"matchCriteriaId": "7BC4A4A0-4EEE-4C51-BFF4-4B65C815AB4F"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*",
"vulnerable": true,
"matchCriteriaId": "72CC2D03-538A-4603-B4FF-C6930F9D7E20"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:*:x64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5894A4E3-D063-4BE2-8579-B9BBF581EE98"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:itanium:*",
"vulnerable": true,
"matchCriteriaId": "54879DE7-47AE-4E94-986C-4D956B64411C"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
},
{
"criteria": "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openpgp:openpgp:2.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE7DB4DC-5369-4087-B055-F1B1BFB50812"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F205B07D-D1C9-4761-9C63-D7BE5E2C73CF",
"versionEndIncluding": "8.6"
},
{
"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40679A45-CE96-4F49-B552-8FB5B6AD493F"
},
{
"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99FB50CA-9C49-4358-8C1F-803CC976408D"
},
{
"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D153658-7BAF-42D3-AA20-3B6193EB184B"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E10D9BF9-FCC7-4680-AD3A-95757FC005EA"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78E8C3A4-9FA7-4F2A-8C65-D4404715E674"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28A10F5A-067E-4DD8-B585-ABCD6F6B324E"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "249FA642-3732-4654-88CB-3F1D19A5860A"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5071CA39-65B3-4AFB-8898-21819E57A084"
},
{
"criteria": "cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3C3F588-98DA-4F6F-A083-2B9EE534C561"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xinuos:openserver:5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E2AD5B8-44C1-4981-A795-E76EFFD8C96E"
},
{
"criteria": "cpe:2.3:o:xinuos:openserver:5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E97E1A-268A-4F18-86A4-39A960E2082C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xinuos:unixware:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25A2CA45-7476-4D11-9236-15072E4C9CA6"
},
{
"criteria": "cpe:2.3:o:xinuos:unixware:7.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F96B92D7-ED2E-439C-B1D7-949628CF4456"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "The DHS advisory is a good source of background information about the\nissue: http://www.us-cert.gov/cas/techalerts/TA04-111A.html\n\nIt is important to note that the issue described is a known function of TCP. In order to perform a connection reset an attacker would need to know the source and destination ip address and ports as well as being able to guess the sequence number within the window. These requirements seriously reduce the ability to trigger a connection reset on normal TCP connections. The DHS advisory explains that BGP routing is a specific case where being able to trigger a reset is easier than expected as the end points can be easily determined and\nlarge window sizes are used. BGP routing is also signficantly affected by having it’s connections terminated. The major BGP peers have recently switched to requiring md5 signatures which mitigates against this attack.\n\nThe following article from Linux Weekly News also puts the flaw into context and shows why it does not pose a significant threat:\nhttp://lwn.net/Articles/81560/\n\nRed Hat does not have any plans for action regarding this issue.\n",
"lastModified": "2006-08-16T00:00:00",
"organization": "Red Hat"
}
],
"evaluatorComment": "<a href=\"https://cwe.mitre.org/data/definitions/331.html\">CWE-331: Insufficient Entropy</a>",
"sourceIdentifier": "cve@mitre.org"
}