QwikSec

Security Database

CVE

CWE

Training

CVE-2009-1926

Published: Sep 8, 2009

Modified: Oct 17, 2024

PUBLISHED

Description

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

oval:org.mitre.oval:def:5965

vdb-entry

signature

x_refsource_OVAL

http://www.recurity-labs.com/content/pub/Microsoft_Windows_CVE-2009-1926

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_CERT

vendor-advisory

x_refsource_MS

20090909 TCP/IP Orphaned Connections Vulnerability

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.