CVE-2005-0356

Medium

Description

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

SeverityMedium
CVSS5.0
Exploit probability—
ProductCisco Remote Monitoring Suite Option
PublishedMay 31, 2005
First seenMay 31, 2005

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco remote_monitoring_suite_optionNo range specified—
cisco agent_desktopNo range specified—
cisco e-mail_managerNo range specified—
cisco emergency_responder1.1—
cisco intelligent_contact_manager5.0—
cisco interactive_voice_responseNo range specified—
cisco ip_contact_center_enterpriseNo range specified—
cisco ip_contact_center_expressNo range specified—
cisco meetingplaceNo range specified—
cisco personal_assistant1.3\(1\), 1.3\(2\), 1.3\(3\), 1.3\(4\), 1.4\(1\), 1.4\(2\)—
cisco secure_access_control_server2.0, 2.1, 2.3, 2.3.5.1, 2.3.6.1, 2.4, 2.5, 2.6, 2.6.2, 2.6.3, 2.6.4, 2.42, 3.0, 3.0.1, 3.0.3, 3.1, 3.1.1, 3.2, 3.2\(1\), 3.2\(1.20\), 3.2\(2\), 3.2\(3\), 3.2.1, 3.2.2, 3.3, 3.3\(1\), 3.3.1, 3.3.2—
cisco support_toolsNo range specified—
cisco web_collaboration_optionNo range specified—
hitachi alaxalaax—
cisco call_manager1.0, 2.0, 3.0, 3.1, 3.1\(2\), 3.1\(3a\), 3.2, 3.3, 3.3\(3\), 4.0—
cisco unity_server2.0, 2.1, 2.2, 2.3, 2.4, 2.46, 3.0, 3.1, 3.2, 3.3, 4.0—
cisco mgx_82301.2.10, 1.2.11—
cisco mgx_82501.2.10, 1.2.11—
cisco ciscoworks_access_control_list_manager1.5, 1.6—
cisco ciscoworks_common_management_foundation2.0, 2.1, 2.2—
cisco ciscoworks_common_services2.2—
cisco ciscoworks_lms1.3—
cisco ciscoworks_vpn_security_management_solutionNo range specified—
cisco ciscoworks_windowsNo range specified—
cisco webns7.10_\(05.07\)s, 7.20_\(03.09\)s, 7.20_\(03.10\)s, 7.30_\(00.08\)s, 7.30_\(00.09\)s—
nortel business_communications_manager200, 400, 1000—
nortel callpilot200i, 201i, 702t, 703t—
nortel contact_centerNo range specified—
cisco content_services_switch_11000No range specified—
cisco content_services_switch_11050No range specified—
cisco content_services_switch_11150No range specified—
cisco content_services_switch_11500No range specified—
cisco content_services_switch_11501No range specified—
cisco content_services_switch_11503No range specified—
cisco content_services_switch_11506No range specified—
cisco content_services_switch_11800No range specified—
nortel 7220_wlan_access_pointNo range specified—
nortel 7250_wlan_access_pointNo range specified—
nortel ethernet_routing_switch_1612No range specified—
nortel ethernet_routing_switch_1624No range specified—
nortel ethernet_routing_switch_1648No range specified—
nortel optical_metro_5000No range specified—
nortel optical_metro_5100No range specified—
nortel optical_metro_5200No range specified—
nortel succession_communication_server_1000No range specified—
nortel survivable_remote_gateway1.0—
nortel universal_signaling_point5200, compact_lite—
cisco ciscoworks_1105_hosting_solution_engineNo range specified—
cisco ciscoworks_1105_wireless_lan_solution_engineNo range specified—
cisco ciscoworks_cd11st, 2nd, 3rd, 4th, 5th—
cisco ciscoworks_windows_wugNo range specified—
cisco conference_connection1.1\(1\), 1.2—
freebsd freebsd1.1.5.1, 2.0, 2.0.5, 2.1.0, 2.1.5, 2.1.6, 2.1.6.1, 2.1.7.1, 2.2, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.8, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.5.1, 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.6.2, 4.7, 4.8, 4.9, 4.10, 4.11—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.