The TCP stack implementation of numerous vendors contains a flaw that may allow a remote denial of service. The issue is triggered when spoofed TCP Reset packets are received by the targeted TCP stack, and will result in loss of availability for the attacked TCP services.
Classification
Location:
Local Access Required,
Remote / Network Access
Attack Type:
Denial of Service,
Infrastructure
Impact:
Loss of Availability
Exploit:
Exploit Public
Solution
Install vendor upgrades or patches to resolve this issue. Routers using BGP are highly recommended to implement RFC-2385 (BGP TCP MD5 Signatures) as a work-around.
paw.org -
OSVDB
