CVE Database
/

CVE-2005-3774

Back to search

CVE-2005-3774

Published: Nov 23, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.

VendorProductVersions

n/a

n/a

affected
n/a

References

1015256
vdb-entry
x_refsource_SECTRACK
cisco-pix-ttl-dos(25079)
vdb-entry
x_refsource_XF
24140
vdb-entry
x_refsource_OSVDB
15525
vdb-entry
x_refsource_BID
20051122 Cisco PIX TCP Connection Prevention
mailing-list
x_refsource_FULLDISC
VU#853540
third-party-advisory
x_refsource_CERT-VN
17670
third-party-advisory
x_refsource_SECUNIA
ADV-2005-2546
vdb-entry
x_refsource_VUPEN
20051122 Cisco PIX TCP Connection Prevention
mailing-list
x_refsource_BUGTRAQ
20051122 Cisco PIX TCP Connection Prevention
mailing-list
x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now