CVE-2005-0356
Description
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco remote_monitoring_suite_option | No range specified | — |
| cisco agent_desktop | No range specified | — |
| cisco e-mail_manager | No range specified | — |
| cisco emergency_responder | 1.1 | — |
| cisco intelligent_contact_manager | 5.0 | — |
| cisco interactive_voice_response | No range specified | — |
| cisco ip_contact_center_enterprise | No range specified | — |
| cisco ip_contact_center_express | No range specified | — |
| cisco meetingplace | No range specified | — |
| cisco personal_assistant | 1.3\(1\), 1.3\(2\), 1.3\(3\), 1.3\(4\), 1.4\(1\), 1.4\(2\) | — |
| cisco secure_access_control_server | 2.0, 2.1, 2.3, 2.3.5.1, 2.3.6.1, 2.4, 2.5, 2.6, 2.6.2, 2.6.3, 2.6.4, 2.42, 3.0, 3.0.1, 3.0.3, 3.1, 3.1.1, 3.2, 3.2\(1\), 3.2\(1.20\), 3.2\(2\), 3.2\(3\), 3.2.1, 3.2.2, 3.3, 3.3\(1\), 3.3.1, 3.3.2 | — |
| cisco support_tools | No range specified | — |
| cisco web_collaboration_option | No range specified | — |
| hitachi alaxala | ax | — |
| cisco call_manager | 1.0, 2.0, 3.0, 3.1, 3.1\(2\), 3.1\(3a\), 3.2, 3.3, 3.3\(3\), 4.0 | — |
| cisco unity_server | 2.0, 2.1, 2.2, 2.3, 2.4, 2.46, 3.0, 3.1, 3.2, 3.3, 4.0 | — |
| cisco mgx_8230 | 1.2.10, 1.2.11 | — |
| cisco mgx_8250 | 1.2.10, 1.2.11 | — |
| cisco ciscoworks_access_control_list_manager | 1.5, 1.6 | — |
| cisco ciscoworks_common_management_foundation | 2.0, 2.1, 2.2 | — |
| cisco ciscoworks_common_services | 2.2 | — |
| cisco ciscoworks_lms | 1.3 | — |
| cisco ciscoworks_vpn_security_management_solution | No range specified | — |
| cisco ciscoworks_windows | No range specified | — |
| cisco webns | 7.10_\(05.07\)s, 7.20_\(03.09\)s, 7.20_\(03.10\)s, 7.30_\(00.08\)s, 7.30_\(00.09\)s | — |
| nortel business_communications_manager | 200, 400, 1000 | — |
| nortel callpilot | 200i, 201i, 702t, 703t | — |
| nortel contact_center | No range specified | — |
| cisco content_services_switch_11000 | No range specified | — |
| cisco content_services_switch_11050 | No range specified | — |
| cisco content_services_switch_11150 | No range specified | — |
| cisco content_services_switch_11500 | No range specified | — |
| cisco content_services_switch_11501 | No range specified | — |
| cisco content_services_switch_11503 | No range specified | — |
| cisco content_services_switch_11506 | No range specified | — |
| cisco content_services_switch_11800 | No range specified | — |
| nortel 7220_wlan_access_point | No range specified | — |
| nortel 7250_wlan_access_point | No range specified | — |
| nortel ethernet_routing_switch_1612 | No range specified | — |
| nortel ethernet_routing_switch_1624 | No range specified | — |
| nortel ethernet_routing_switch_1648 | No range specified | — |
| nortel optical_metro_5000 | No range specified | — |
| nortel optical_metro_5100 | No range specified | — |
| nortel optical_metro_5200 | No range specified | — |
| nortel succession_communication_server_1000 | No range specified | — |
| nortel survivable_remote_gateway | 1.0 | — |
| nortel universal_signaling_point | 5200, compact_lite | — |
| cisco ciscoworks_1105_hosting_solution_engine | No range specified | — |
| cisco ciscoworks_1105_wireless_lan_solution_engine | No range specified | — |
| cisco ciscoworks_cd1 | 1st, 2nd, 3rd, 4th, 5th | — |
| cisco ciscoworks_windows_wug | No range specified | — |
| cisco conference_connection | 1.1\(1\), 1.2 | — |
| freebsd freebsd | 1.1.5.1, 2.0, 2.0.5, 2.1.0, 2.1.5, 2.1.6, 2.1.6.1, 2.1.7.1, 2.2, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.8, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.5.1, 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.6.2, 4.7, 4.8, 4.9, 4.10, 4.11 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.